mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-24 20:28:06 +02:00
new capacity bits (#67)
This commit is contained in:
parent
afaffc0df6
commit
7d0e7320e2
261 changed files with 10591 additions and 231 deletions
8
tests/fixtures/ssti/python/safe_render_template_var.py
vendored
Normal file
8
tests/fixtures/ssti/python/safe_render_template_var.py
vendored
Normal file
|
|
@ -0,0 +1,8 @@
|
|||
# Safe-template-var: Flask `render_template("file.html", **vars)`. The
|
||||
# first arg is a *file path* (constant), variables carry user input but
|
||||
# never become template source. Must NOT fire SSTI.
|
||||
from flask import render_template, request
|
||||
|
||||
|
||||
def handler():
|
||||
return render_template("greeting.html", name=request.args.get("name"))
|
||||
Loading…
Add table
Add a link
Reference in a new issue