[<%=idx%>] <%=escapeHTML(issue.name)%>

<% if crypto_issues.is_a?( Array ) && crypto_issues[idx-1] %>

<% end %>

Module name: <%=escapeHTML(issue.mod_name)%>
(Internal module name: <%=escapeHTML(issue.internal_modname)%>)
Affected variable: <%=escapeHTML(issue.var)%>
Affected URL: <%=escapeHTML(issue.url)%>
HTML Element: <%=issue.elem%>
Requires manual verification?: <%=issue.verification ? 'Yes' : 'No'%>

CWE: <%=issue.cwe%>
(<%=issue.cwe_url%>)
Severity: <%=issue.severity%>
CVSSV2: <%=issue.cvssv2%>

References

<%=escapeHTML(source)%> - <%=url%>
N/A

Description

<%=escapeHTML(issue.description)%>

<% if issue.remedy_guidance && !issue.remedy_guidance.empty? %>

Remedial guidance

<%=escapeHTML(issue.remedy_guidance)%>

<%end%> <% if issue.remedy_code && !issue.remedy_code.empty? %>

Remedial code

<%=escapeHTML(issue.remedy_code)%>

<%end%> <% if (remarks = issue.variations.first.remarks).any? %>

Remarks

<% remarks.each do |commenter, remarks| %>

By <%= commenter %>:

<% remarks.each do |remark| %>

<%=escapeHTML( remark )%>

<% end %> <% end %> <% end %>

<% issue.variations.each_with_index do |variation, j| %> <% var_idx = j + 1%>

[+] Variation <%=var_idx%>

Affected URL:

<%=escapeHTML(variation['url'])%>

<% if (variation['response'] && !variation['response'].empty?) && variation['regexp_match'] %>

<% match = escapeHTML( variation['regexp_match'] )%>

 <%=escapeHTML( variation['response'] ).gsub( match, '' + match + '' ) %>

<%end%> <% if issue.method && (issue.elem.downcase == 'form' || issue.elem.downcase == 'link' ) && ( issue.method.downcase == 'get' || issue.method.downcase == 'post' ) %> <%end%>

<% if variation['injected'] %> Injected value:

 <%=escapeHTML( variation['injected'].inspect )%>

<%end%> <% if variation['id'] %> ID:

<%=escapeHTML(variation['id'])%>

<%end%> <% if variation['regexp'] %> Regular expression:

<%=escapeHTML(variation['regexp'])%>

<%end%> <% if variation['regexp_match'] %> Matched by the regular expression:

<%=escapeHTML(variation['regexp_match'])%>

<%end%>
<%= erb :headers, { headers: variation['headers']['request'] } %> <%= erb :headers, { headers: variation['headers']['response'] } %>

Headers
Request		Response

<% if variation['escaped_response']%>

<%end%>