Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 13:48:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
5,470 Commits 16 Branches 39 Tags
611b1b1f39ab1f8fcd3c5ba85838e82a4a1edbf4
Commit Graph
3 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Eric Gu aad4894f77 Fix stored XSS in HTML report via unescaped Location: header (#3090) 
pr_url() and pr_boldurl() interpolated their argument directly into
<a href="$1">$1</a> without HTML escaping. The most notable caller
passes the raw HTTP Location: header from the scanned server, so a
malicious HTTPS target could inject arbitrary HTML/JS into an
operator's --htmlfile report. Route both the href attribute and the
link text through the existing html_reserved() escaper, matching the
pattern already used by every other pr_* HTML-output function.
 2026-07-11 22:53:36 -04:00
Eric Gu (@ericguuu)andGitHub 5a69b1c344 bugfix: aesgcm_used --> enc_aesgcm_used 2026-07-09 08:45:38 -04:00
Eric Gu (@ericguuu)andGitHub 09a17c0cc1 fix: nverted return check in sym-encrypt() at testssl.sh:14741 makes the function return error 7 on every success. 
[BUG / possible BUG] Inverted return check in sym-encrypt() at testssl.sh:14741 makes the function return error 7 on every success. The tm_out line at testssl.sh:14743 is unreachable.
 #3079
 2026-07-08 08:28:33 -04:00