Mirrors/xsshunter
2
0
Fork 0
mirror of https://github.com/trufflesecurity/xsshunter synced 2024-11-27 23:00:18 +00:00
Code Issues Projects Releases Packages Wiki Activity

fixing ugly XSS

Browse source
This commit is contained in:
counter 2023-01-28 22:17:33 -08:00
parent a3b312fbcc
commit 023ab17b3b
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
front-end/src/pages/XSSPayloadFireReports.vue
View file

@ -136,7 +136,7 @@
TruffleHog-lite, used to capture any secrets harvested from the HTML and Javascript. TruffleHog-lite, used to capture any secrets harvested from the HTML and Javascript.
</small> </small>
</div> </div>
<div v-if="report.secrets"> <div class="m-2 mt-4" v-if="report.secrets">
<pre v-for="secret in report.secrets">Secret type: {{ secret.secret_type }} <pre v-for="secret in report.secrets">Secret type: {{ secret.secret_type }}
Secret value: {{ secret.secret_value }}</pre> Secret value: {{ secret.secret_value }}</pre>
</div> </div>
@ -152,7 +152,7 @@ Secret value: {{ secret.secret_value }}</pre>
What is the CORS policy for the website the XSS rendered on? What is the CORS policy for the website the XSS rendered on?
</small> </small>
</div> </div>
<div> <div class="m-2 mt-4">
<pre v-if="report.CORS">Access-Control-Allow-Origin: {{report.CORS}}</pre> <pre v-if="report.CORS">Access-Control-Allow-Origin: {{report.CORS}}</pre>
<pre v-else><i>No CORS headers detected</i></pre> <pre v-else><i>No CORS headers detected</i></pre>
</div> </div>
@ -165,7 +165,7 @@ Secret value: {{ secret.secret_value }}</pre>
Was the source code exposed via /.git ? (Shows contents of /.git/config) Was the source code exposed via /.git ? (Shows contents of /.git/config)
</small> </small>
</div> </div>
<div> <div class="m-2 mt-4">
<pre v-if="report.gitExposed">{{report.gitExposed}}</pre> <pre v-if="report.gitExposed">{{report.gitExposed}}</pre>
<pre v-else><i>No .git directory detected</i></pre> <pre v-else><i>No .git directory detected</i></pre>
</div> </div>