Fix href attribute-injection XSS in Cross Site Scripting Challenge 5 - #339

Closed

beanbeah wants to merge 3 commits into

OWASP-CTF:dc34-ctffrom

beanbeah:ctf/r2-challenge-challenge-39-xss-5

Commits on Aug 9, 2026

fix: harden XssFilter.badUrlValidate() against href attribute-injection (XSS Challenge 5)

beanbeah
and
claude
committed
929fff3
style: apply spotless/google-java-format to XssChallengeFiveExploitTest

beanbeah
and
claude
committed
56fedfc
style: switch test file's class comment to // lines to avoid javadoc reflow mismatch

beanbeah
and
claude
committed
6833b81