https://github.com/gastaldi/resteasy-xss

https://github.com/gastaldi/resteasy-xss

Last synced: 5 days ago
JSON representation

• Host: GitHub
• URL: https://github.com/gastaldi/resteasy-xss
• Owner: gastaldi
• Created: 2020-03-05T22:19:15.000Z (almost 5 years ago)
• Default Branch: master
• Last Pushed: 2020-08-07T01:07:03.000Z (over 4 years ago)
• Last Synced: 2024-11-08T09:47:37.505Z (about 2 months ago)
• Language: HTML
• Homepage:
• Size: 57.6 KB
• Stars: 0
• Watchers: 3
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# resteasy-xss project

This project uses Quarkus, the Supersonic Subatomic Java Framework.

If you want to learn more about Quarkus, please visit its website: https://quarkus.io/ .

## Running the application in dev mode

You can run your application in dev mode that enables live coding using:

```

./mvnw quarkus:dev

```

## Packaging and running the application

The application can be packaged using `./mvnw package`.

It produces the `resteasy-xss-1.0-SNAPSHOT-runner.jar` file in the `/target` directory.

Be aware that it’s not an _über-jar_ as the dependencies are copied into the `target/lib` directory.

The application is now runnable using `java -jar target/resteasy-xss-1.0-SNAPSHOT-runner.jar`.

## Reproducing RESTEASY-2519

Open a browser and enter this URL:

http://localhost:8080/users?paging=0%2c-1sp137%3Cscript%3Ealert(1)%3C%2fscript%3Emzx4u

You should see an alert box being executed