()
| 4 | |
| 5 | @app.route('/XSS_param', methods =['GET']) |
| 6 | def XSS1(): |
| 7 | param = request.args.get('param', 'not set') |
| 8 | |
| 9 | param = Markup.escape(param) |
| 10 | |
| 11 | html = open('templates/XSS_param.html').read() |
| 12 | resp = make_response(html.replace('{{ param }}', param)) |
| 13 | return resp |
| 14 | |
| 15 | if __name__ == '__main__': |
| 16 | app.run(debug= True) |