{'context_id': 496, 'vulnerable': True, 'processing': False, 'request': {'url': 'https://owens.net/list/list/tagspost.html', 'method': 'POST', 'headers': {'HOST': '127.0.0.1:5000', 'USER_AGENT': 'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0', 'ACCEPT': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8', 'ACCEPT_LANGUAGE': 'en-US,en;q=0.5', 'ACCEPT_ENCODING': 'gzip, deflate, br, zstd', 'REFERER': 'http://127.0.0.1:5000/guestbook', 'CONNECTION': 'keep-alive', 'COOKIE': 'csrftoken=7GgBqVlBL6WuGdfu3e6EBXep8N5vFiVm; grafana_session=54c841e9cb2f4956a7c791efd284d120; grafana_session_expiry=1735995560; user_id=2; session_token=b3c634c91e1711c794704a031918a34b; session=eyJjc3JmX3Rva2VuIjoiMzNkNDNlNjA2MDhiMjdjZjBiMGI1Yzk3NWU4MDExZjRjYWMxMzRhNyJ9.Z5GBRA.Q8r4qzslZbU-6Y0h-x9F551fn1A', 'UPGRADE_INSECURE_REQUESTS': '1', 'SEC_FETCH_DEST': 'document', 'SEC_FETCH_MODE': 'navigate', 'SEC_FETCH_SITE': 'same-origin', 'SEC_FETCH_USER': '?1', 'PRIORITY': 'u=0, i', 'Content-Type': 'application/json', 'User-Agent': 'Opera/9.30.(Windows NT 6.1; ru-UA) Presto/2.9.163 Version/12.00'}, 'body': b'csrfmiddlewaretoken=46f1ec01-7f00-429e-81a2-bb7094d67723&newpass1=Yk2lOSoh&newpass2=rkqq4Nw0'}, 'control_flow': {0: "search_query = request.args.get('q')", 1: 'comments = db.get(search_query)', 2: 'db = init()', 3: "db = sqlite3.connect('data.db')", 4: "db.cursor().execute('CREATE TABLE IF NOT EXISTS comments (id INTEGER PRIMARY KEY, comment TEXT, date TEXT)')", 5: 'return db', 6: 'results = []', 7: "for(comment, date) in db.cursor().execute('SELECT comment, date FROM comments').fetchall():", 8: 'if query is None or query in comment:', 9: 'results.append((comment, date))', 10: "for(comment, date) in db.cursor().execute('SELECT comment, date FROM comments').fetchall():", 11: 'if query is None or query in comment:', 12: 'results.append((comment, date))', 13: "for(comment, date) in db.cursor().execute('SELECT comment, date FROM comments').fetchall():", 14: 'if query is None or query in comment:', 15: 'results.append((comment, date))', 16: "for(comment, date) in db.cursor().execute('SELECT comment, date FROM comments').fetchall():", 17: 'return results', 18: 'form = forms.AddCommentForm()', 19: 'if form.validate_on_submit():', 20: "return render_template('guestbook.html', form=form, comments=comments, search_query=search_query)", 21: '', 22: '<head>', 23: '<!-- Required meta tags -->', 24: '<meta charset="utf-8">', 25: '<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">', 26: '', 27: '<title>My Guestbook</title>', 28: '', 29: '<!-- Bootstrap CSS -->', 30: '<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css"', 31: 'integrity="sha384-9aIt2nRpC12Uk9gS9baDl411NQApFmC26EwAOH8WgZl5MYYxFfc+NcPb1dKGj7Sk" crossorigin="anonymous">', 32: '', 33: '<!-- Styling -->', 34: '<link rel="stylesheet" type="text/css" href="../static/styles/guestbook.css">', 35: '<link rel="icon" type="image/x-icon" href="../static/guestbook.ico">', 36: '</head>', 37: '', 38: '<div class="content center">', 39: '<div class="container-fluid">', 40: '<form action="{{ url_for(\'guestbook\') }}" method="post">', 41: '{{ form.csrf_token }}', 42: '<div class="row">', 43: '<h3 class="form-header">Add a new Guestbook entry 😊</h3>', 44: '<div class="col">', 45: '{{ form.comment(class="form-control form-comment") }}', 46: '</div>', 47: '<div class="col">', 48: '', 49: '<p class="search-hint">Psssst.. you can even <a href="{{ url_for(\'guestbook\', q=\'test\') }}"', 50: 'class="search-hint-anchor">search</a> through the', 51: 'comments 🤫</p>', 52: '', 53: '{% if not search_query %}', 54: '<h3 class="comment-header">Current guestbook entries:</h3>', 55: '{% else %}', 56: '<h3 class="comment-header">Results for "{{ search_query }}"</h3>', 57: '<p class="search-hint">Psssst.. you can even <a href="{{ url_for(\'guestbook\', q=\'test\') }}"', 58: 'class="search-hint-anchor">search</a> through the', 59: 'comments 🤫</p>', 60: '', 61: '{% if not search_query %}', 62: '<h3 class="comment-header">Current guestbook entries:</h3>', 63: '{% else %}', 64: '<h3 class="comment-header">Results for "{{ search_query }}"</h3>', 65: '<p class="search-hint">Psssst.. you can even <a href="{{ url_for(\'guestbook\', q=\'test\') }}"', 66: 'class="search-hint-anchor">search</a> through the', 67: 'comments 🤫</p>', 68: '', 69: '{% if not search_query %}', 70: '<h3 class="comment-header">Current guestbook entries:</h3>', 71: '{% else %}', 72: '<h3 class="comment-header">Results for "{{ search_query }}"</h3>', 73: '<p class="search-hint">Psssst.. you can even <a href="{{ url_for(\'guestbook\', q=\'test\') }}"', 74: '{% endif %}', 75: '', 76: '{% for comment, date in comments %}', 77: '<div class="comment">'}, 'response': {'status_code': '403', 'headers': {'Content-Type': 'text/html; charset=utf-8', 'Content-Length': '2209', 'Vary': 'Cookie'}}}