Merge pull request #1571 from dune73/new-tests-for-941290

Adding new test for 941260 and 941290 based on XSS cheatsheet by portswigger

Author: lifeforms

util/regression-tests/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941260.yaml

@@ -21,3 +21,19 @@
           version: HTTP/1.0
         output:
           log_contains: id "941260"
+  -
+    test_title: 941260-2
+    desc: "XSS test based on portswigger XSS cheatsheet"
+    stages:
+    -
+      stage:
+        input:
+          dest_addr: 127.0.0.1
+          headers:
+            Host: localhost
+          method: POST
+          port: 80
+          data: "payload=<meta charset=\"UTF-7\" /> +ADw-script+AD4-alert(1)+ADw-/script+AD4-</a>"
+          version: HTTP/1.0
+        output:
+          log_contains: id "941260"

util/regression-tests/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941290.yaml

@@ -21,3 +21,19 @@
           version: HTTP/1.0
         output:
           log_contains: id "941290"
+  -
+    test_title: 941290-2
+    desc: "XSS test based on portswigger XSS cheatsheet"
+    stages:
+    -
+      stage:
+        input:
+          dest_addr: 127.0.0.1
+          headers:
+            Host: localhost
+          method: POST
+          port: 80
+          data: "payload=<applet onreadystatechange=alert(1)></applet></a>"
+          version: HTTP/1.0
+        output:
+          log_contains: id "941290"