Jay Taylor's notes
back to listing indexGitHub - bugy/script-server: Web UI for your scripts with execution management
[web search]
Original source (github.com)
Clipped on: 2022-08-18
Skip to content
For the usage please check this ticket
For the usage please check this ticket
Any security leaks report or recommendations are greatly appreciated!
Script server is vulnerable to these attacks.
(v1.17+)
Script server is protected against XSRF attacks via a special token.
XSS protection: the code is written according to
OWASP Cheat Sheet
and the only known vulnerabilities are:
output_format=html_iframe, see the reasoning in the linked Wiki page
