Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Burp Enterprise check for Cross-site scripting (reflected) encoding issue

zzzFicarra, | Last updated: Jan 25, 2021 07:45PM UTC

In Burp Enterprise the "Cross-site scripting (reflected)" check is delivering findings with Confidence "certain" An example would be as follows: Request: https://www.example.com/page.aspx?amdb3"><script>alert(1)</script>a05cr=1 In the response body it shows an embedded link with the script tag and double quotes unmodified. This clearly leaves an opportunity for javascript injection. <link rel="canonical" href="https://www.example.com/page.aspx?amdb3"><script>alert(1)</script>a05cr=1" /> However, upon manual verification in Chrome, Safari, and Firefox, the characters are properly encoded. <link rel="canonical" href="https://www.example.com/page.aspx?amdb3%22%3E%3Cscript%3Ealert(1)%3C/script%3Ea05cr=1"> Could you help me to understand the discrepancy between the presentation of the finding in your tool vs the presentation of the results in an actual browser?

Liam, PortSwigger Agent | Last updated: Jan 26, 2021 09:35AM UTC