private function reflectedXss() { $result = new TestResult(); $result->setName("reflectedXss"); $message = "message"; $this->session->open($this->url . "<script>alert('" . $message . "')</script>"); $p = $this->session->switch_to_alert(); if ($p != null && $p->text === $message) { $result->setResult(false); //fail } else { $result->setResult(true); //pass } return $result; }
private function reflectedXssAjax() { $result = new TestResult(); $result->setName("reflectedXssAjax"); $message = "message"; $this->webdriver->get($this->url . "feed.gtl?uid=<script>alert('" . $message . "')</script>"); $p = $this->webdriver->switchTo()->alert()->getText(); if ($p != null && $p === $message) { $result->setResult(false); //fail } else { $result->setResult(true); //pass } return $result; }