mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-30 20:39:39 +02:00
new capacity bits (#67)
This commit is contained in:
parent
afaffc0df6
commit
7d0e7320e2
261 changed files with 10591 additions and 231 deletions
6
tests/fixtures/header_injection/php/unsafe_set_header.php
vendored
Normal file
6
tests/fixtures/header_injection/php/unsafe_set_header.php
vendored
Normal file
|
|
@ -0,0 +1,6 @@
|
|||
<?php
|
||||
// Unsafe: $_GET['lang'] concatenated into a `header()` line. The bare
|
||||
// `header` matcher (exact-match sigil) fires on the call. Tainted input
|
||||
// without `\r\n` stripping permits response splitting.
|
||||
$lang = $_GET['lang'];
|
||||
header("X-Lang: " . $lang);
|
||||
Loading…
Add table
Add a link
Reference in a new issue