search

flipkart-incubator / Astra

Automated Security Testing For REST API's
Apache License 2.0
2.5k stars 401 forks source link

Update xss.py #34

Closed ananaskr closed 6 years ago

ananaskr commented 6 years ago

A small confusion in xss.py. The 'xss_request_uri' in line 149 should be 'xss_request_url'.

sagarpo commented 6 years ago

The check is for URI based XSS. Example: http://localhost/?test=. test param in URL is again hardcoded param name.

It should be xss_request_uri in only line no 150. Please verify the same from your side and do the required changes and after that I will merge the pull request.