/
mialdr
/
python_advanced
Обзор
Документация
Войти
/
mialdr
/
python_advanced
Код
Запросы
0
Задачи
Вики
Пакеты
0
Релизы
0
Аналитика
Безопасность
master
module_28_security/homework/task_2/hw.py
50 строк
984 B
Mikhail Druchek
module 28 is solved
23 май 2024, 18:47
23 май 2024, 18:47
b26fa33
Код
Авторство
О чём код?
from flask import Flask, jsonify, request, Response page_header = """ <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <title>Title</title> </head> <body> <form action="" method="GET"> """ page_footer = """ </form> </body> </html> """ main_page_markup = """ <form action="" method="GET"> <input id="query" name="query" value="Enter query here..." onfocus="this.value=''"> <input id="button" type="submit" value="Search"> </form> """ app = Flask(__name__) @app.route('/xss', methods=['GET']) def xss(): if not request.args.get('query'): input = main_page_markup else: input = request.args.get('query') return page_header + input + page_footer @app.after_request def add_cors(response: Response): response.headers['Content-Security-Policy'] = 'default-src "self"' return response if __name__ == '__main__': app.run(port=8080, debug=True)