Пример #1
0
 private function reflectedXss()
 {
     $result = new TestResult();
     $result->setName("reflectedXss");
     $message = "message";
     $this->session->open($this->url . "<script>alert('" . $message . "')</script>");
     $p = $this->session->switch_to_alert();
     if ($p != null && $p->text === $message) {
         $result->setResult(false);
         //fail
     } else {
         $result->setResult(true);
         //pass
     }
     return $result;
 }
Пример #2
0
 private function reflectedXssAjax()
 {
     $result = new TestResult();
     $result->setName("reflectedXssAjax");
     $message = "message";
     $this->webdriver->get($this->url . "feed.gtl?uid=<script>alert('" . $message . "')</script>");
     $p = $this->webdriver->switchTo()->alert()->getText();
     if ($p != null && $p === $message) {
         $result->setResult(false);
         //fail
     } else {
         $result->setResult(true);
         //pass
     }
     return $result;
 }