Files
bigbrother/modules
Cobra e9735a15bb Fix #208: Prevent SSTI in responder_mgr.py Jinja2 template
- Use jinja2.Environment with BaseLoader instead of Template
- Enable autoescape=True to escape all template variables
- Sanitize relay_targets by converting to strings: [str(ip) for ip in ...]
- Prevents template injection even if relay_targets contains malicious content
2026-04-06 11:38:59 -04:00
..