Add new A7 - Cross-Site Scripting (XSS) web app (JS)

[Krlier]

Motivation

SecDevLab's goal is to provide examples of how security vulnerabilities could be fixed, but we only have one example of Cross-Site Scripting from OWASP's 2017 Top 10.

It would be great if

We had another app illustrating this vulnerability and how it could be exploited by an attacker.

What we expect

The new app must have a complete README.md with all the steps on how to get the environment ready to run it, how it can be installed, and how an attacker could compromise it.

The app should be similar to the existing web apps, such as this one.

Note: It would be great if this app could be powered by anything other than Python. 🙂

Tips

• OWAST A7:2017 Cross-Site Scripting
• Google Application Security - Cross-Site Scripting
• App Spot - XSS Game

[ghost]

Can I go for this?

[rafaveira3]

Absolutely, @MEME-MAN234! We will be very happy to review any PR related to this issue. :)

[ghost]

@rafaveira3 Do I have to use docker?

[ghost]

@rafaveira3 I am using react

[ghost]

@rafaveira3 review my PR

[Krlier]

Hi, @MEME-MAN234! Thanks for taking the time to contribute to secDevLabs!

For simplicity's sake, I believe it's best for us to comment on your PR directly on it! So we'll be adding some comments there, stay tuned!

[daviluis321]

Hi, can I make an example with other technologies (rails, django)?

[rafaveira3]

Sure, @daviluis321! It would be great if we had a Rails app! I have just created a new issue here.