Sboxr captures all the DOM Communication performed by an application. It monitors the following communication channels:
Ajax calls, this includes XMLHttpRequest and fetch API use
Cross-window messages sent via postMessage API
Sboxr then processes the data sent in these communication channels and identifies all the data leaked by the site on the client-side.
The following options exist for viewing the data leaked: