Fixes an XSS in the action parameter

occam-ra / occam

OCCAM Reconstructability Analysis Tools

Other

20 stars 14 forks source link

Closed maxrp closed 6 months ago

maxrp commented 2 years ago

This fixes occam-ra/occam#62

Demo payload: /weboccam.cgi?action=%3C%2Finput%3E%3Cscript%3Ealert(%22xss%22)%3B%3C%2Fscript%3E%3Cinput%3E

BartMassey commented 2 years ago

@Gooseus You're welcome to merge this when ready ofc

BartMassey commented 6 months ago

Thanks much for this PR. Should have merged it long ago.