<%= name %>

<% include ../partials/ruleInfo.ejs %> <% groupedSinkData.query.forEach(function(sink, i) { %>

<%= sink.name %>

Query

Headers

<% headerSink = groupedSinkData.headers[i] %> <% ['unsafe', 'safe', 'noop'].forEach(function(safety) { %> 

curl http://localhost:3000<%= headerSink.url %>/<%= safety %> -H "input: ../../../../../../../../../../../../etc/passwd"

<% }); %> <% bodySink = groupedSinkData.body[i] %>

Body

<% }); %> <% include ../partials/safeButtons %>