google / google/web-api-gateway

Is there a risk of reflective XSS?

Open
#4 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
47
Forks
18
No merged PRs in 30d

Description

https://github.com/google/web-api-gateway/blob/2177cf745a79eac627bcb5e337bacb4418d72f43/server/server.go#L300-L304

`FormValue`s are written directly to the `ResponseWriter`.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.