pyt/example/vulnerable_code/XSS_form.py at 8githubScanRefactor · python-security/pyt · GitHub

Repository navigation

from flask import Flask, render_template, request, make_response

import random

import string

app = Flask(__name__)

@app.route('/example2')

def example2():

return render_template('example2_form.html')

html1 = open('templates/example2_response.html').read()

@app.route('/example2action',methods = ['POST'])

def example2_action():

data = request.form['my_text']

resp = make_response(html1.replace('{{ data }}', data ))

resp.set_cookie('session_id', ''.join(random.choice(string.ascii_uppercase) for x in range(16)))

return resp

if __name__ == '__main__':

app.run(debug= True)