Skip to content

polarspetroll/EscapeAPI

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 

Repository files navigation

Escape API

an API for escaping html, shell and path queries


Documentation

parameters

  • method escaping method
  • data string to be escaped

available methods

Method Description Type Prevention
html HTML escape string XSS
shell UNIX bourne shell escape string os command injection
path UNIX path escape string directory traversal

examples

curl "https://s.polarspetroll.repl.co/api?method=html&data=<>/>,test'"

output :

{
  "ok":true,
  "data":"&lt;&gt;/&gt;,test&#39;"
}

curl "https://s.polarspetroll.repl.co/api?method=shell&data=ls -la | cat /etc/passwd"

output:

{
  "ok":true,
  "data":"ls\\ -la\\ \\|\\ cat\\ /etc/passwd"
}

curl "https://s.polarspetroll.repl.co/api?method=path&data=../../../../../../../etc/passwd"

output:

{
  "ok":true,
  "data":"./././././././etc/passwd"
}