Skip to content

Instantly share code, notes, and snippets.

@paulblei

paulblei/vulnerable-templating.rb

Created March 8, 2018 17:14
Show Gist options
  • Save paulblei/dc537af42f71bd921b5d99874a88ca1e to your computer and use it in GitHub Desktop.
Save paulblei/dc537af42f71bd921b5d99874a88ca1e to your computer and use it in GitHub Desktop.
Download ZIP
Vulnerable Ruby on Rails templating
Raw
vulnerable-templating.rb
<div>
<h1>Blog post: <%= @post.title %></h1> (1)
<br />
<a href=“<%= @post.url %>”>Click here to see the full story</a> (2)
<script>
record_post_view(@post.id); (3)
</script>
<div id=“footer” <%= @post.footer_attr %>>&copy; 2018</div> (4)
</div>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment