search

izar / pytm

A Pythonic framework for threat modeling
Other
876 stars 165 forks source link

Added output encoding for each Element's findings data #176

Closed nozmore closed 2 years ago

nozmore commented 2 years ago

There was a bug where the findings objects on each Element were not html encoded. If you created a report to loop thru those findings and included the 'example' element there was an XSS alert that popped up.