docker-vulnerable-dvwa/dvwa/vulnerabilities/xss_d/source/medium.php
2018-10-12 15:49:58 +00:00

15 lines
289 B
PHP

<?php
// Is there any input?
if ( array_key_exists( "default", $_GET ) && !is_null ($_GET[ 'default' ]) ) {
$default = $_GET['default'];
# Do not allow script tags
if (stripos ($default, "<script") !== false) {
header ("location: ?default=English");
exit;
}
}
?>