0

I am learning about security and trying different hacks. I have a basic web server using flask

from flask import Flask

app = Flask(__name__)

@app.route("/<name>")
def hello_name(name):
    return f"hello {name}"

Then on my browser (tried with firefox and chrome - same results) I enter the following:

127.0.0.1:5000/<h1>test<"forward slash"h1>

or

127.0.0.1:5000/<h1>test<%2fh1>

And get: Not Found The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

Is it the browser blocking this? Next instead of h1, I want to use the script tag. But I need to get this one right first. Is it possible to send HTML in the URL?

Daniel A. White
  • 187,200
  • 47
  • 362
  • 445
Akran9400
  • 1
  • 1

0 Answers0