FazBrowse GitHub Viewer
|
Trending
|
URL:
|
Home
Tools:
[Download Repo ZIP]
[View Raw Code]
[Original HTTPS Page]
pyt/example/vulnerable_code/render_ids.py at github-search-menu · jackcoolpython/pyt · GitHub
jackcoolpython
pyt
Repository navigation
Code
Pull requests
Actions
Projects
Security and quality
Insights
Expand file tree
Breadcrumbs
pyt
/
example
/
vulnerable_code
/
render_ids.py
Copy path
More file actions
More file actions
Latest commit
History
History
History
17 lines (11 loc) · 333 Bytes
Breadcrumbs
pyt
/
example
/
vulnerable_code
/
render_ids.py
Copy path
File metadata and controls
17 lines (11 loc) · 333 Bytes
Raw
Copy raw file
Download raw file
Open symbols panel
Edit and raw actions
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
from
flask
import
Flask
,
render_template
app
=
Flask
(
__name__
)
@
app
.
route
(
'/'
)
def
index
():
# Expected value
ids
=
[
u"one"
,
u"two's"
,
u'"three"'
]
# Injected somehow
ids
=
' onmouseover=alert(1) '
return
render_template
(
'render_ids.html'
,
ids
=
ids
)
if
__name__
==
'__main__'
:
app
.
run
(
port
=
80
,
debug
=
True
)
Back
|
FazBrowse Home
|
New Git URL