小程序渗透测试双11优惠活动

import sqlite3

def get_user(username):
    conn = sqlite3.connect('example.db')
    cursor = conn.cursor()
    query = "SELECT * FROM users WHERE username = ?"
    cursor.execute(query, (username,))
    user = cursor.fetchone()
    conn.close()
    return user

function escapeHtml(unsafe) {
    return unsafe
         .replace(/&/g, "&")
         .replace(/</g, "&lt;")
         .replace(/>/g, "&gt;")
         .replace(/"/g, "&quot;")
         .replace(/'/g, "&#039;");
}

document.getElementById("user-input").innerHTML = escapeHtml(userInput);

from flask import Flask, request, session, redirect, url_for
import uuid

app = Flask(__name__)
app.secret_key = 'your_secret_key'

@app.route('/login', methods=['POST'])
def login():
    session['csrf_token'] = str(uuid.uuid4())
    # 处理登录逻辑

@app.route('/sensitive-action', methods=['POST'])
def sensitive_action():
    if request.form['csrf_token'] != session.get('csrf_token'):
        return "Invalid CSRF token", 403
    # 处理敏感操作