add unescaped regex test
This commit is contained in:
@@ -44,5 +44,10 @@
|
|||||||
"Description" : "The origin verification is flawed and can be bypassed using a backtick (`).",
|
"Description" : "The origin verification is flawed and can be bypassed using a backtick (`).",
|
||||||
"Severity" : "High",
|
"Severity" : "High",
|
||||||
"Exploitation" : "Set the 'Origin' header to %60.example.com"
|
"Exploitation" : "Set the 'Origin' header to %60.example.com"
|
||||||
|
},
|
||||||
|
"unescaped regex" : {
|
||||||
|
"Description" : "The regex used for origin verification contains an unescaped dot (.) character.",
|
||||||
|
"Severity" : "High",
|
||||||
|
"Exploitation" : "If the target is sub.example.com, make requests from subxexample.com"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user