OWASP / OWASP/SecurityShepherd
XSS3 should not filter five times
Open
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 1.5k
- Forks
- 515
- Avg merge
- 3h 46m
- Merged PRs (30d)
- 1
Description
The broken non-recursive filter in XSS3 repeats the filter five times before stopping. That's not good because nobody in their right mind would go past three-four attempts before giving up on that particular route. We should lower this to something like two or three.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the XSS3 non-recursive filter implementation and the limit controlling its repeated passes. Confirm where the current five-pass behavior is defined, decide whether the project context supports two or three attempts, and verify that filtering stops at the chosen limit.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100