Skip to content

Instantly share code, notes, and snippets.

Last active July 3, 2019 17:19
  • Star 2 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
Star You must be signed in to star a gist
Save sirdarckcat/ca04e67ea28500fe40bd498e7e3df0df to your computer and use it in GitHub Desktop.
jQuery Mobile XSS
application: jquery-mobile-xss
version: 1
runtime: python27
api_version: 1
threadsafe: yes
- url: /.*
script: main.APP
- name: webapp2
version: "2.5.2"
import webapp2
class MainHandler(webapp2.RequestHandler):
def get(self): # pylint:disable-msg=invalid-name
"""Handle GET requests."""
<link rel="stylesheet" href="" />
<script src=""></script>
<script src=""></script>""")
class RedirectHandler(webapp2.RequestHandler):
def get(self):
"""Handle GET requests."""
APP = webapp2.WSGIApplication([
('/redirect', RedirectHandler),
('/.*', MainHandler),
], debug=True)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment