Taint analysis (Inputs that affect output)

<%=item['element']['type'].capitalize%> <%if item['element']['name']%> named '<%=item['element']['name']%>' <%end%> <%if item['element']['altered']%> using the '<%=item['element']['altered']%>' input <%end%> <%if item['element']['owner']%> at <%=item['element']['owner']%> <%end%> <%if item['element']['action']%> pointing to <%=item['element']['action']%> <%end%> <%if item['element']['method']%> using <%=item['request']['method']%> <%end%>

It was submitted using the following parameters:

<%item['element']['auditable'].each_pair do |k, v| %>
• <%=k%> = <%=v%>
<%end%>

<%item['landed'].each do |elem| %>
• <%=elem['type'].capitalize%> <%if elem['name']%> named '<%=elem['name']%>' <%end%> <%if elem['altered']%> using the '<%=elem['altered']%>' input <%end%> <%if elem['auditable']%>
  <%elem['auditable'].each_pair do |k, v| %>
  • <%=k%> = <%=v%>
  <%end%>
  <%end%>
<%end%>

 <%=CGI.escapeHTML( item['response']['body'] ).gsub( item['taint'], '' + item['taint'] + '' ) %>