From b051e1b70e2667ef211d86b6c1e992c49f07fc5c Mon Sep 17 00:00:00 2001 From: AmirHossein Raeisi <96957814+Ahsraeisi@users.noreply.github.com> Date: Mon, 13 May 2024 13:15:08 +0000 Subject: [PATCH] fix template validation action --- templates/5.1.5.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/templates/5.1.5.yaml b/templates/5.1.5.yaml index 43c6585..0942052 100644 --- a/templates/5.1.5.yaml +++ b/templates/5.1.5.yaml @@ -14,7 +14,7 @@ info: - https://snbig.github.io/Vulnerable-Pages/ASVS_5_1_5/ tags: asvs,5.1.5 description: | - Verify that URL redirects and forwards only allow destinations which appear on an allow list, or show a warning when redirecting to potentially untrusted content. + Verify that URL redirects and forwards only allow destinations which appear on an allow list, or show a warning when redirecting to potentially untrusted content. variables: vulnerable_parameter: "url" @@ -26,7 +26,7 @@ http: - "{{BaseURL}}//{{payload}}" - "{{BaseURL}}/?{{vulnerable_parameter}}={{payload}}" - "{{BaseURL}}?{{vulnerable_parameter}}={{payload}}" - + payloads: payload: - '%0a/evil.com/'