ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-18 18:36:10 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #236 from Techbrunch/patch-9

Browse Source 
Update README.md
This commit is contained in:
Swissky 2020-08-19 16:30:32 +02:00 committed by GitHub
commit 75a0f34bdc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
Server Side Template Injection/README.md
View File

@ -35,6 +35,7 @@
* [Jinja2](#jinja2) * [Jinja2](#jinja2)
* [Basic injection](#basic-injection) * [Basic injection](#basic-injection)
* [Template format](#template-format) * [Template format](#template-format)
* [Debug Statement](#debug-statement)
* [Dump all used classes](#dump-all-used-classes) * [Dump all used classes](#dump-all-used-classes)
* [Dump all config variables](#dump-all-config-variables) * [Dump all config variables](#dump-all-config-variables)
* [Read remote file](#read-remote-file) * [Read remote file](#read-remote-file)
@ -339,6 +340,16 @@ The above injections have been tested on Flask application.
``` ```
### Debug Statement¶
If the Debug Extension is enabled, a `{% debug %}` tag will be available to dump the current context as well as the available filters and tests. This is useful to see what’s available to use in the template without setting up a debugger.
```python
<pre>{% debug %}</pre>
```
Source: https://jinja.palletsprojects.com/en/2.11.x/templates/#debug-statement
### Dump all used classes ### Dump all used classes
```python ```python