Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-07-15 19:47:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3091 from ericcgu/fix/3090-html-xss-pr-url

Browse Source 
Fix stored XSS in HTML report via unescaped Location: header (#3090)
This commit is contained in:
Dirk Wetter
2026-07-12 14:43:29 +02:00
committed by GitHub
parent 21bf1ff19f aad4894f77
commit 611b1b1f39
3 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGELOG.md
+1
View File
@@ -13,6 +13,7 @@
* Enable IPv6 automagically, i.e. if target via IPv6 is reachable just (also) scan it * Enable IPv6 automagically, i.e. if target via IPv6 is reachable just (also) scan it
* Detect and show DNS HTTPS RR (RFC 9460) * Detect and show DNS HTTPS RR (RFC 9460)
* Provide an FAQ * Provide an FAQ
* Security fix: HTML-escape URLs in the HTML report to prevent stored XSS from a server-controlled `Location:` header (#3090)
### Features implemented / improvements in 3.2 ### Features implemented / improvements in 3.2
CREDITS.md
+3
View File
@@ -71,6 +71,9 @@ Full contribution, see git log.
* Christian Dresen * Christian Dresen
- Dockerfile - Dockerfile
* Eric Gu
- HTML report XSS fix (escape server-controlled URLs, #3090)
* enxio * enxio
- support for TN3270/telnet STARTTLS - support for TN3270/telnet STARTTLS
testssl.sh
+2 -2
View File
@@ -760,8 +760,8 @@ tmln_fixme() { tmln_warning "Fixme: $1"; }
pr_fixme() { pr_warning "Fixme: $1"; } pr_fixme() { pr_warning "Fixme: $1"; }
prln_fixme() { prln_warning "Fixme: $1"; } prln_fixme() { prln_warning "Fixme: $1"; }
pr_url() { tm_out "$1"; html_out "<a href=\"$1\" style=\"color:black;text-decoration:none;\">$1</a>"; } pr_url() { tm_out "$1"; html_out "<a href=\"$(html_reserved "$1")\" style=\"color:black;text-decoration:none;\">$(html_reserved "$1")</a>"; }
pr_boldurl() { tm_bold "$1"; html_out "<a href=\"$1\" style=\"font-weight:bold;color:black;text-decoration:none;\">$1</a>"; } pr_boldurl() { tm_bold "$1"; html_out "<a href=\"$(html_reserved "$1")\" style=\"font-weight:bold;color:black;text-decoration:none;\">$(html_reserved "$1")</a>"; }
### color switcher (see e.g. https://linuxtidbits.wordpress.com/2008/08/11/output-color-on-bash-scripts/ ### color switcher (see e.g. https://linuxtidbits.wordpress.com/2008/08/11/output-color-on-bash-scripts/
### https://www.tldp.org/HOWTO/Bash-Prompt-HOWTO/x405.html ### https://www.tldp.org/HOWTO/Bash-Prompt-HOWTO/x405.html