removed safe from auto escape html due to security concern

archerysec · Nov 25, 2021 · 793e948 · 793e948
1 parent b9fd50c
commit 793e948
Show file tree

Hide file tree

Showing 4 changed files with 10 additions and 10 deletions.
diff --git a/templates/networkscanners/scans/vuln_details.html b/templates/networkscanners/scans/vuln_details.html
@@ -31,7 +31,7 @@ <h5 class="mb-0">
                             <div id="collapseOne" class="collapse show" aria-labelledby="headingOne"
                                  data-parent="#accordionExample">
                                 <div class="card-body">
-                                    {{ data.description | safe }}
+                                    {{ data.description }}
 
                                 </div>
                             </div>
@@ -73,7 +73,7 @@ <h5 class="mb-0">
                             <div id="collapseThree" class="collapse" aria-labelledby="headingThree"
                                  data-parent="#accordionExample">
                                 <div class="card-body">
-                                    {{ data.solution | safe }}
+                                    {{ data.solution }}
                                 </div>
                             </div>
                         </div>
@@ -90,7 +90,7 @@ <h5 class="mb-0">
                             <div id="collapseFour" class="collapse" aria-labelledby="headingFour"
                                  data-parent="#accordionExample">
                                 <div class="card-body">
-                                    <a href="{{ data.references | safe }}">{{ data.references | safe }}</a>
+                                    <a href="{{ data.references }}">{{ data.references }}</a>
                                 </div>
                             </div>
                         </div>

diff --git a/templates/pentest/manual_vuln_data.html b/templates/pentest/manual_vuln_data.html
@@ -76,7 +76,7 @@ <h5 class="mb-0">
                             <div id="collapse4" class="collapse" aria-labelledby="heading4"
                                  data-parent="#accordionExample">
                                 <div class="card-body">
-                                    {{ data.reference | safe }}
+                                    {{ data.reference }}
                                 </div>
                             </div>
                         </div>

diff --git a/templates/staticscanners/scans/vuln_details.html b/templates/staticscanners/scans/vuln_details.html
@@ -31,7 +31,7 @@ <h5 class="mb-0">
                             <div id="collapseOne" class="collapse show" aria-labelledby="headingOne"
                                  data-parent="#accordionExample">
                                 <div class="card-body">
-                                    {{ data.description | safe }}
+                                    {{ data.description }}
 
                                 </div>
                             </div>
@@ -68,7 +68,7 @@ <h5 class="mb-0">
                             <div id="collapseThree" class="collapse" aria-labelledby="headingThree"
                                  data-parent="#accordionExample">
                                 <div class="card-body">
-                                    <a href="{{ data.solution | safe }}">{{ data.solution | safe }}</a>
+                                    <a href="{{ data.solution }}">{{ data.solution }}</a>
                                 </div>
                             </div>
                         </div>
@@ -85,7 +85,7 @@ <h5 class="mb-0">
                             <div id="collapseFour" class="collapse" aria-labelledby="headingFour"
                                  data-parent="#accordionExample">
                                 <div class="card-body">
-                                    <a href="{{ data.references | safe }}">{{ data.references | safe }}</a>
+                                    <a href="{{ data.references }}">{{ data.references }}</a>
                                 </div>
                             </div>
                         </div>

diff --git a/templates/webscanners/scans/vuln_details.html b/templates/webscanners/scans/vuln_details.html
@@ -36,7 +36,7 @@ <h5 class="mb-0">
                             <div id="collapseOne" class="collapse show" aria-labelledby="headingOne"
                                  data-parent="#accordionExample">
                                 <div class="card-body">
-                                    {{ data.description | safe }}
+                                    {{ data.description | striptags }}
                                 </div>
                             </div>
                         </div>
@@ -126,7 +126,7 @@ <h5 class="mb-0">
                             <div id="collapseThree" class="collapse" aria-labelledby="headingThree"
                                  data-parent="#accordionExample">
                                 <div class="card-body">
-                                    {{ data.solution | safe }}
+                                    {{ data.solution | striptags }}
                                 </div>
                             </div>
                         </div>
@@ -143,7 +143,7 @@ <h5 class="mb-0">
                             <div id="collapse4" class="collapse" aria-labelledby="heading4"
                                  data-parent="#accordionExample">
                                 <div class="card-body">
-                                    {{ data.reference | safe }}
+                                    {{ data.reference }}
                                 </div>
                             </div>
                         </div>