Skip to content

Instantly share code, notes, and snippets.

@intchloe

intchloe/OH-SHIT-ITS-DYNAMIC-CSP.php

Created April 25, 2016 23:33
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save intchloe/8ae8260e8ea5404c32bca547b797cfd7 to your computer and use it in GitHub Desktop.
Save intchloe/8ae8260e8ea5404c32bca547b797cfd7 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
OH-SHIT-ITS-DYNAMIC-CSP.php
<?php
echo "<img src=" . $_GET['x'] . "/>";
echo "<script>" . $_GET['x'] . "</script>";
if ($_GET['foo'] == "bar") {
echo "<img src='https://www.petfinder.com/wp-content/uploads/2012/11/140272627-grooming-needs-senior-cat-632x475.jpg'/></br>";
echo "<script>" . $_GET['x'] . "</script>";
}
if ($_GET['baz'] == "foz") {
echo '<script>document.write("Hello from inline script!");</script></br>';
echo "<img src=" . $_GET['x'] . "/>";
}
?>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment