{"action":"opened","issue":{"url":"https://api.github.com/repos/Arachni/arachni/issues/900","repository_url":"https://api.github.com/repos/Arachni/arachni","labels_url":"https://api.github.com/repos/Arachni/arachni/issues/900/labels{/name}","comments_url":"https://api.github.com/repos/Arachni/arachni/issues/900/comments","events_url":"https://api.github.com/repos/Arachni/arachni/issues/900/events","html_url":"https://github.com/Arachni/arachni/issues/900","id":241434337,"number":900,"title":"arachni seems cannot find xss issue in web app with vue.js?","user":{"login":"gmaclinuxer","id":14108137,"avatar_url":"https://avatars3.githubusercontent.com/u/14108137?v=3","gravatar_id":"","url":"https://api.github.com/users/gmaclinuxer","html_url":"https://github.com/gmaclinuxer","followers_url":"https://api.github.com/users/gmaclinuxer/followers","following_url":"https://api.github.com/users/gmaclinuxer/following{/other_user}","gists_url":"https://api.github.com/users/gmaclinuxer/gists{/gist_id}","starred_url":"https://api.github.com/users/gmaclinuxer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gmaclinuxer/subscriptions","organizations_url":"https://api.github.com/users/gmaclinuxer/orgs","repos_url":"https://api.github.com/users/gmaclinuxer/repos","events_url":"https://api.github.com/users/gmaclinuxer/events{/privacy}","received_events_url":"https://api.github.com/users/gmaclinuxer/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-07-08T07:56:06Z","updated_at":"2017-07-08T07:56:06Z","closed_at":null,"body":"> index.html snippet\r\n`\r\n<div id=\"app\">\r\n    <div class=\"container\">\r\n        <h1>页面直接回显：</h1>\r\n        <div class=\"form-group\"><label>Company Name：</label><span v-html=\"company.companyName\"></span></div>\r\n        <div class=\"form-group\"><label>Contact Name：</label>{{ company.contactName }}</div>\r\n        <div class=\"form-group\"><label>Phone：</label>{{ company.phone }}</div>\r\n\r\n        <form action=\"\">\r\n            <h1 class=\"dialog-title\">表单数据POST提交</h1>\r\n            <div class=\"form-group\">\r\n                <label>Company Name</label>\r\n                <input type=\"text\" name=\"companyName\" v-model=\"item.companyName\"/>\r\n            </div>\r\n\r\n            <div class=\"form-group\">\r\n                <label>Contact Name</label>\r\n                <input type=\"text\" name=\"contactName\" v-model=\"item.contactName\"/>\r\n            </div>\r\n\r\n            <div class=\"form-group\">\r\n                <label>Phone</label>\r\n                <input type=\"text\" name=\"phone\" v-model=\"item.phone\"/>\r\n            </div>\r\n            <div class=\"form-group\">\r\n                <label></label>\r\n                <button @click.prevent=\"createCustomer\">Create</button>\r\n            </div>\r\n        </form>\r\n    </div>\r\n</div>\r\n\r\n`\r\n\r\n> js snippet\r\n`\r\n<script>\r\n    var ajaxHelper = new AjaxHelper();\r\n\r\n    var demo = new Vue({\r\n        el: '#app',\r\n        data: {\r\n            apiUrl: site_url + 'vtest/customers/',\r\n            company: {},\r\n            item: {}\r\n        },\r\n        methods: {\r\n            createCustomer: function () {\r\n                var vm = this,\r\n                    callback = function (data) {\r\n                        vm.company = data;\r\n                    };\r\n                // 将vm.item直接POST到服务端\r\n                ajaxHelper.post(vm.apiUrl, vm.item, callback);\r\n            }\r\n        }\r\n    })\r\n</script>\r\n`"}}
{"actor":{"display_login":"gmaclinuxer"}}