mushorg / tanner

He who flays the hide
GNU General Public License v3.0
220 stars 101 forks source link

Twig template injection #401

Open mzfr opened 4 years ago

mzfr commented 4 years ago

Add twig template Fix for #381

coveralls commented 4 years ago

Pull Request Test Coverage Report for Build 1411


Changes Missing Coverage Covered Lines Changed/Added Lines %
tanner/emulators/twig_template_injection.py 19 26 73.08%
<!-- Total: 19 26 73.08% -->
Totals Coverage Status
Change from base Build 1400: -0.05%
Covered Lines: 1581
Relevant Lines: 2048

💛 - Coveralls
afeena commented 4 years ago

@mzfr And what is the pattern to catch this type of attack?

mzfr commented 4 years ago

@afeena This kind of injection can be detected by the same regex used for tornado template injection.

That is why I didn't added any new pattern.

rjt-gupta commented 4 years ago

@mzfr Are you able to see the results now?

mzfr commented 4 years ago

@rjt-gupta no, still having the same problem i.e no error, no result.