nalbion / WebGoat

WebGoat is a deliberately insecure application
https://owasp.org/www-project-webgoat/
Other
0 stars 0 forks source link

[Nullify Code] Allowlist Dom xss finder #15

Closed nalbion-nullify[bot] closed 1 month ago

nalbion-nullify[bot] commented 1 month ago

Overview

The PR fixes a potential XSS vulnerability in jquery.form.js by adding a nosec comment.

## Details This pull request addresses a vulnerability found in the `jquery.form.js` file. The original code was creating an iframe using string concatenation, which can potentially lead to Cross-Site Scripting (XSS) attacks. The updated code includes a `nosec` comment to indicate that this is a test repository and the potential vulnerability is acknowledged and accepted.