Remove XSS from list of vulnerabilities

ShiftLeftSecurity · Jul 17, 2023 · dd34433 · dd34433
1 parent 435330e
commit dd34433
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 3 deletions.
diff --git a/README.md b/README.md
@@ -31,7 +31,6 @@ This project contains the following vulnerabilities:
 
 - Remote Code Execution
 - SQL injection
-- XSS
 - Insecure Deserialization
 - Directory Traversal
 - Open Redirect
@@ -47,7 +46,6 @@ $ grep vulnerability . -R -n | grep -v README
 ./flask_webgoat/actions.py:43:    # vulnerability: Remote Code Execution
 ./flask_webgoat/users.py:37:    # vulnerability: SQL Injection
 ./flask_webgoat/auth.py:17:    # vulnerability: SQL Injection
-./flask_webgoat/ui.py:14:        # vulnerability: XSS
 ./flask_webgoat/actions.py:60:    # vulnerability: Insecure Deserialization
 ./flask_webgoat/actions.py:35:        # vulnerability: Directory Traversal
 ./flask_webgoat/auth.py:45:        # vulnerability: Open Redirect

diff --git a/flask_webgoat/ui.py b/flask_webgoat/ui.py
@@ -11,7 +11,6 @@ def search():
     query_param = request.args.get("query")
     if query_param is None:
         message = "please provide the query parameter"
-        # vulnerability: XSS
         return render_template("error.html", message=message)
 
     try: