daffainfo
/
PayloadsAllTheThings
mirror of https://github.com/daffainfo/PayloadsAllTheThings.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update README.md 

Add reference to debug tag for Jinja2
patch-1
Techbrunch 2020-08-19 14:46:43 +02:00 committed by GitHub
parent cc95f4e386
commit 502a8121b4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
Server Side Template Injection/README.md
View File

@ -35,6 +35,7 @@
* [Jinja2](#jinja2) * [Jinja2](#jinja2)
* [Basic injection](#basic-injection) * [Basic injection](#basic-injection)
* [Template format](#template-format) * [Template format](#template-format)
* [Debug Statement](#debug-statement)
* [Dump all used classes](#dump-all-used-classes) * [Dump all used classes](#dump-all-used-classes)
* [Dump all config variables](#dump-all-config-variables) * [Dump all config variables](#dump-all-config-variables)
* [Read remote file](#read-remote-file) * [Read remote file](#read-remote-file)
@ -338,6 +339,16 @@ The above injections have been tested on Flask application.
``` ```
### Debug Statement¶
If the Debug Extension is enabled, a `{% debug %}` tag will be available to dump the current context as well as the available filters and tests. This is useful to see what’s available to use in the template without setting up a debugger.
```python
<pre>{% debug %}</pre>
```
Source: https://jinja.palletsprojects.com/en/2.11.x/templates/#debug-statement
### Dump all used classes ### Dump all used classes
```python ```python