From 02b5cba4205398deeb8ca7bc9bca762ec79270fd Mon Sep 17 00:00:00 2001 From: arielkru <63583491+arielkru@users.noreply.github.com> Date: Tue, 6 Feb 2024 18:09:59 +0200 Subject: [PATCH] Update flask.py --- python/flask.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/python/flask.py b/python/flask.py index c78931d..6557504 100644 --- a/python/flask.py +++ b/python/flask.py @@ -3,14 +3,17 @@ import bleach app = Flask(__name__) + # curl -X GET "http://localhost:5000/tainted7/touch%20HELLO" @app.route("/tainted7/") def test_sources_7(something): + os.system(request.remote_addr) return "foo" + @app.route("/sanitized/") def test_sources_7(something): data = flask.request.args.get("key") @@ -19,5 +22,6 @@ def test_sources_7(something): return "bar" + if __name__ == "__main__": app.run(debug=True)