# DOM Input Liberator

> Pentesting tool: remove form restrictions, reveal hidden elements, bypass input validation

Canonical page: [https://chrome-stats.com/d/dom-input-liberator](https://chrome-stats.com/d/dom-input-liberator)

## Overview

- **ID:** `dom-input-liberator`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** Lamisedaxeh
- **Category:** web-development,appearance
- **Daily users:** 1
- **Version:** 1.0.0
- **Last updated:** 2026-07-13
- **First published:** 2026-07-10
- **Size:** 41 KB
- **Data as of:** 2026-09-06
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/dom-input-liberator/)
- **Website:** [https://gitlab.com/lamisedaxeh/dominputliberator](https://gitlab.com/lamisedaxeh/dominputliberator)

## Description

A browser extension for penetration testing that removes client-side form restrictions, reveals hidden elements, and bypasses input validation. Works on Chrome and Firefox.

<strong>UI:</strong>
<ul><li><strong>Popup</strong> — Toggle categories on/off individually or use "Liberate All" master toggle. Each category can be expanded to enable/disable specific items.</li><li><strong>Floating Badge</strong> — A counter badge appears on the page showing how many elements were modified. Click it to see a per-category breakdown. Click outside to dismiss.</li><li><strong>Highlighting</strong> — Modified elements are outlined in the category's color. Toggle highlighting on/off from the popup.</li></ul>
<strong>Features list:</strong>
<ul><li><strong>Form Controls</strong>: Remove <code>disabled</code>, <code>readonly</code>, <code>required</code>, <code>maxlength</code>, <code>minlength</code>, <code>pattern</code>, <code>multiple</code>, <code>accept</code> attributes, re-enable <code>autocomplete</code>, reveal password fields as plain text</li><li><strong>Input Validation</strong>: Strip <code>min</code>, <code>max</code>, <code>step</code> attributes and convert restricted input types (number, email, url, date, etc.) to plain text fields</li><li><strong>Hidden Fields</strong>: Convert <code>type="hidden"</code> inputs to visible text fields with a purple dashed border so you can view and edit their values</li><li><strong>Hidden Elements (CSS)</strong>: Reveal elements hidden via <code>display: none</code>, <code>visibility: hidden</code>, <code>opacity: 0</code>, the <code>hidden</code> attribute, or collapsed <code>&amp;lt;details&gt;</code> elements</li><li><strong>Content Editing</strong>: Make all block-level elements contenteditable so you can modify any text on the page. Disabled by default </li><li><strong>Iframes</strong>: Reveal hidden iframes (zero-sized, display:none, opacity:0) with a labeled border showing their <code>src</code></li><li><strong>Event Blockers</strong>: Remove inline event handlers that block user interaction: <code>onsubmit</code>, <code>onchange</code>, <code>oninput</code>, <code>oncopy</code>, <code>onpaste</code>, <code>oncut</code>. Also prevents clipboard and context menu blocking</li><li><strong>Size Constraints</strong>: Remove <code>cols</code>, <code>rows</code>, <code>size</code> attributes from textareas/inputs and force <code>resize: both</code> on textareas</li><li><strong>Comments</strong>: Unwrap HTML comments so their content becomes live DOM. Uncomment JS comments in inline scripts so commented-out code executes</li><li><strong>Fill Payloads</strong>: One-click button to fill all visible inputs with XSS, template injection, SQL injection, and path traversal test payloads</li></ul>

## Rankings

- #89,315 — Overall
- #52 — input

## Permissions and access

### Permissions

- `storage`
- `activeTab`
- `scripting`

### Content script matches

- `<all_urls>`

## Safety

- **Risk impact:** Moderate risk impact
- **Risk likelihood:** High risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [FreeDOM:Unlock Elements](https://chrome-stats.com/d/freedom-unlock-elements) — 14 users
- [Hack the Form](https://chrome-stats.com/d/hack-the-form) — 3 users
- [FormVisualizer](https://chrome-stats.com/d/formvisualizer) — 3 users
- [Accessibility Insights for Web](https://chrome-stats.com/d/accessibility-insights-for-web) — 79 users, 1.00 / 5
- [Hack-mate (OSCP)](https://chrome-stats.com/d/hack-mate-oscp) — 4 users
- [Form Hack](https://chrome-stats.com/d/form-hack) — 166 users, 4.33 / 5
- [KHackBar](https://chrome-stats.com/d/khackbar) — 15 users, 5.00 / 5
- [xDevTools - Developer Utilities](https://chrome-stats.com/d/xdevtools-developer-utilities) — 23 users
- [Hidden Fields Revealer](https://chrome-stats.com/d/hidden-fields-revealer) — 2 users
- [Fix My Input](https://chrome-stats.com/d/fix-my-input)
- [HackTools](https://chrome-stats.com/d/hacktools) — 1,653 users, 4.70 / 5
- [HackBar](https://chrome-stats.com/d/firefox-hackbar) — 1,918 users, 4.50 / 5

---

Source: [Chrome-Stats](https://chrome-stats.com/d/dom-input-liberator)