search

asciimoo / morty

Privacy aware web content sanitizer proxy as a service
GNU Affero General Public License v3.0
485 stars 58 forks source link

Check for XSS #89

Closed dalf closed 4 years ago

dalf commented 4 years ago

Check if the XSS in https://github.com/terjanq/Tiny-XSS-Payloads are blocked by Morty.

the0d0re9 commented 4 years ago

Just checked, they don't seem to work, there's a whitelist rather than a blacklist, so most of the onload/onerror badness is blocked.

asciimoo commented 4 years ago

Great, thanks!