Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Webseclab: Fix any 5 Reflected JavaScript issues #7212

Open
psiinon opened this issue Apr 14, 2022 · 2 comments · May be fixed by zaproxy/zap-extensions#3838
Open

Webseclab: Fix any 5 Reflected JavaScript issues #7212

psiinon opened this issue Apr 14, 2022 · 2 comments · May be fixed by zaproxy/zap-extensions#3838
Assignees
@jokrsec
Labels
add-on bounty Issues eligible for a bounty - detailed in the issue FalseNegative FalsePositive

Comments

@psiinon
Copy link
Member

psiinon commented Apr 14, 2022

Fix any 5 of the currently failing Reflected JavaScript results on https://www.zaproxy.org/docs/scans/webseclab/

If you would like to 'reserve' up to 5 of the failures (there are currently 7) then add them in a comment and we will not accept any PRs fixing them for a 'reasonable period of time' - the exact definition of we'll need to work out in practice.
@psiinon psiinon added FalsePositive add-on FalseNegative bounty Issues eligible for a bounty - detailed in the issue labels Apr 14, 2022
@jokrsec
Copy link

jokrsec commented Apr 21, 2022

Hello, I want to work on the following issues

/backslash1
/enc2
/js3
/js3_fp
/js3_notags

@psiinon
Copy link
Member Author

psiinon commented Apr 22, 2022

@jokrhub I've assigned this issue to you and you can consider those failures reserved for you :)
If you'd like any advise and guidance then just ask here (or on IRC).
Thanks for taking this on!

@jokrsec jokrsec mentioned this issue May 26, 2022
Closed
@jokrsec jokrsec linked a pull request Jun 8, 2022 that will close this issue
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jokrsec jokrsec

Labels
add-on bounty Issues eligible for a bounty - detailed in the issue FalseNegative FalsePositive
Milestone
No milestone
2 participants
@psiinon @jokrsec