lua analysis html

English | 简体中文

lua analysis html xss detection

Based on lua-htmlparser

Main purpose

1.Xss semantic analysis 2.Help discover xss attacks

Examples

package.path="./src/?.lua;" ..package.pathlocalxss_engine=require("xss_engine")
localtext=[[<img src=x onerror=alert(1)>]]ifxss_engine.is_xss(text) thenprint("this is info xss")
elseprint("this is info not xss")
end

[root@localhost lua-htmlparser]# luajit test2.lua 
this is info xss