an API for escaping html, shell and path queries
parameters
- method escaping method
- data string to be escaped
available methods
| Method | Description | Type | Prevention |
|---|---|---|---|
| html | HTML escape | string | XSS |
| shell | UNIX bourne shell escape | string | os command injection |
| path | UNIX path escape | string | directory traversal |
curl "https://s.polarspetroll.repl.co/api?method=html&data=<>/>,test'" output :
{ "ok":true, "data":"<>/>,test'" }curl "https://s.polarspetroll.repl.co/api?method=shell&data=ls -la | cat /etc/passwd" output:
{ "ok":true, "data":"ls\\ -la\\ \\|\\ cat\\ /etc/passwd" }curl "https://s.polarspetroll.repl.co/api?method=path&data=../../../../../../../etc/passwd" output:
{ "ok":true, "data":"./././././././etc/passwd" }