Grasscutters/mitmproxy
3
0
Fork 0
mirror of https://github.com/Grasscutters/mitmproxy.git synced 2025-02-01 15:55:28 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #1066 from fimad/master

Browse Source 
Fix XSS vulnerability in HTTP errors
This commit is contained in:
Maximilian Hils 2016-03-31 19:36:01 +02:00
commit 06c6d88359
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
mitmproxy/models/http.py
View File

@ -1,5 +1,6 @@
from __future__ import (absolute_import, print_function, division)
from six.moves import http_cookies as Cookie
import cgi
import copy
import warnings
from email.utils import parsedate_tz, formatdate, mktime_tz
@ -429,7 +430,7 @@ def make_error_response(status_code, message, headers=None):
</head>
<body>%s</body>
</html>
""".strip() % (status_code, response, message)
""".strip() % (status_code, response, cgi.escape(message))
body = body.encode("utf8", "replace")
if not headers: