-
-
Notifications
You must be signed in to change notification settings - Fork 440
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add 2-3 secured implementations for Reflected XSS #409
Comments
Hi @preetkaran20 |
@Prince-1110 yes please. |
Hi @preetkaran20, I'm a cybersecurity student, and for my project, I need to work on vulnerabilities in a cybersecurity project. I want to focus on reflected XSS and implement 2–3 secure ways to prevent it, and help scanners as you said. |
Hi @LyesRocker , Perfect. Please go ahead. I have assigned it to you. |
Hi @preetkaran20, Thank you for assigning me the issue. Before submitting a pull request, I have worked on the implementation, which you can review in my forked repository: https://github.com/LyesRocker/VulnerableApp/blob/master/src/main/java/org/sasanlabs/service/vulnerability/xss/reflected/XSSInImgTagAttribute.java Let me know your thoughts on it. If everything looks good, I'll proceed with issue #408. Thanks, |
Hi @LyesRocker , Please raise the PR as it is easier to review in PR. |
I did raise an PR, let me know what do you think |
Is your feature request related to a problem? Please describe.
As main target for Vulnerable App is scanners so we need to find out false positives by Scanners such that they can improve on there scan rules. So in order to find out the false positives, we need to add more secured implementations.
Describe the solution you'd like
Add 2-3 more functions in https://github.com/SasanLabs/VulnerableApp/tree/master/src/main/java/org/sasanlabs/service/vulnerability/xss/reflected which are secure.
The text was updated successfully, but these errors were encountered: