Skip to content

Instantly share code, notes, and snippets.

@sirdarckcat
Last active July 3, 2019 17:19
Show Gist options
  • Save sirdarckcat/ca04e67ea28500fe40bd498e7e3df0df to your computer and use it in GitHub Desktop.
Save sirdarckcat/ca04e67ea28500fe40bd498e7e3df0df to your computer and use it in GitHub Desktop.
jQuery Mobile XSS
application: jquery-mobile-xss
version: 1
runtime: python27
api_version: 1
threadsafe: yes
handlers:
- url: /.*
script: main.APP
libraries:
- name: webapp2
version: "2.5.2"
import webapp2
class MainHandler(webapp2.RequestHandler):
def get(self): # pylint:disable-msg=invalid-name
"""Handle GET requests."""
self.response.write("""
<link rel="stylesheet" href="https://code.jquery.com/mobile/1.4.5/jquery.mobile-1.4.5.min.css" />
<script src="https://code.jquery.com/jquery-1.11.1.min.js"></script>
<script src="https://code.jquery.com/mobile/1.4.5/jquery.mobile-1.4.5.min.js"></script>""")
class RedirectHandler(webapp2.RequestHandler):
def get(self):
"""Handle GET requests."""
self.redirect(str(self.request.get("url")))
APP = webapp2.WSGIApplication([
('/redirect', RedirectHandler),
('/.*', MainHandler),
], debug=True)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment