SECURITY: XSS in routes

Co-authored-by: Guo Xiang Tan <tgx_world@hotmail.com>
Co-authored-by: David Taylor <david@taylorhq.com>
This commit is contained in:
Gerhard Schlager
2019-06-26 16:02:55 +02:00
parent 463db22928
commit 13f38055ac
6 changed files with 237 additions and 3 deletions

View File

@@ -2601,5 +2601,205 @@ export default {
],
top_categories: []
}
},
"/u/%E3%83%A9%E3%82%A4%E3%82%AA%E3%83%B3.json": {
user_badges: [],
user: {
id: 2,
username: "ライオン",
name: null,
avatar_template:
"/letter_avatar_proxy/v4/letter/%E3%83%A9/d9b06d/{size}.png",
email: "lion@example.com",
last_posted_at: null,
last_seen_at: "2019-06-26T09:29:56.044Z",
bio_raw: "this is my bio",
bio_cooked: "\u003cp\u003ethis is my bio\u003c/p\u003e",
created_at: "2019-06-26T08:40:40.964Z",
can_edit: true,
can_edit_username: true,
can_edit_email: true,
can_edit_name: true,
ignored: false,
muted: false,
can_ignore_user: false,
can_mute_user: false,
can_send_private_messages: true,
can_send_private_message_to_user: false,
bio_excerpt: "this is my bio",
trust_level: 1,
moderator: false,
admin: false,
title: null,
uploaded_avatar_id: null,
badge_count: 0,
has_title_badges: false,
custom_fields: {},
pending_count: 0,
profile_view_count: 1,
time_read: 0,
recent_time_read: 0,
primary_group_name: null,
primary_group_flair_url: null,
primary_group_flair_bg_color: null,
primary_group_flair_color: null,
second_factor_enabled: false,
second_factor_backup_enabled: false,
associated_accounts: [],
locale: "en_US",
muted_category_ids: [],
watched_tags: [],
watching_first_post_tags: [],
tracked_tags: [],
muted_tags: [],
tracked_category_ids: [],
watched_category_ids: [],
watched_first_post_category_ids: [],
system_avatar_upload_id: null,
system_avatar_template:
"/letter_avatar_proxy/v4/letter/%E3%83%A9/d9b06d/{size}.png",
muted_usernames: [],
ignored_usernames: [],
mailing_list_posts_per_day: 0,
can_change_bio: true,
user_api_keys: null,
user_auth_tokens: [
{
id: 2,
client_ip: "127.0.0.1",
location: "unknown",
browser: "Google Chrome",
device: "GNU/Linux Computer",
os: "Linux",
icon: "fab-linux",
created_at: "2019-06-26T08:41:18.436Z",
seen_at: "2019-06-26T09:24:24.683Z",
is_active: true
}
],
user_auth_token_logs: [
{
id: 4,
client_ip: "127.0.0.1",
location: "unknown",
browser: "Google Chrome",
device: "GNU/Linux Computer",
os: "Linux",
icon: "fab-linux",
created_at: "2019-06-26T08:41:18.448Z",
action: "Log In"
}
],
invited_by: null,
groups: [
{
id: 10,
automatic: true,
name: "trust_level_0",
display_name: "trust_level_0",
user_count: 2,
mentionable_level: 0,
messageable_level: 0,
visibility_level: 0,
primary_group: false,
title: null,
grant_trust_level: null,
has_messages: false,
flair_url: null,
flair_bg_color: null,
flair_color: null,
bio_cooked: null,
bio_excerpt: null,
public_admission: false,
public_exit: false,
allow_membership_requests: false,
full_name: null,
default_notification_level: 3,
membership_request_template: null
},
{
id: 11,
automatic: true,
name: "trust_level_1",
display_name: "trust_level_1",
user_count: 2,
mentionable_level: 0,
messageable_level: 0,
visibility_level: 0,
primary_group: false,
title: null,
grant_trust_level: null,
has_messages: false,
flair_url: null,
flair_bg_color: null,
flair_color: null,
bio_cooked: null,
bio_excerpt: null,
public_admission: false,
public_exit: false,
allow_membership_requests: false,
full_name: null,
default_notification_level: 3,
membership_request_template: null
}
],
group_users: [
{ group_id: 10, user_id: 2, notification_level: 3, owner: false },
{ group_id: 11, user_id: 2, notification_level: 3, owner: false }
],
featured_user_badge_ids: [],
user_option: {
user_id: 2,
mailing_list_mode: false,
mailing_list_mode_frequency: 1,
email_digests: true,
email_level: 1,
email_messages_level: 0,
external_links_in_new_tab: false,
dynamic_favicon: false,
enable_quoting: true,
enable_defer: false,
digest_after_minutes: 1440,
automatically_unpin_topics: true,
auto_track_topics_after_msecs: 240000,
notification_level_when_replying: 2,
new_topic_duration_minutes: 2880,
email_previous_replies: 2,
email_in_reply_to: true,
like_notification_frequency: 1,
include_tl0_in_digests: false,
theme_ids: [2],
theme_key_seq: 0,
allow_private_messages: true,
homepage_id: null,
hide_profile_and_presence: false,
text_size: "normal",
text_size_seq: 0,
title_count_mode: "notifications"
}
}
},
"/u/%E3%83%A9%E3%82%A4%E3%82%AA%E3%83%B3/summary.json": {
topics: [],
user_summary: {
likes_given: 0,
likes_received: 0,
topics_entered: 0,
posts_read_count: 0,
days_visited: 1,
topic_count: 0,
post_count: 0,
time_read: 0,
recent_time_read: 0,
bookmark_count: 0,
topic_ids: [],
replies: [],
links: [],
most_liked_by_users: [],
most_liked_users: [],
most_replied_to_users: [],
badges: [],
top_categories: []
}
}
};