arachni seems cannot find xss issue in web app with vue.js?
Created by: gaohongsong
index.html snippet
<div id="app">
<div class="container">
<div class="form-group"><label>Company Name:</label><span v-html="company.companyName"></span></div>
<div class="form-group"><label>Contact Name:</label>{{ company.contactName }}</div>
<div class="form-group"><label>Phone:</label>{{ company.phone }}</div>
<form>
<div class="form-group">
<label>Company Name</label>
<input type="text" name="companyName" v-model="item.companyName"/>
</div>
<div class="form-group">
<label>Contact Name</label>
<input type="text" name="contactName" v-model="item.contactName"/>
</div>
<div class="form-group">
<label>Phone</label>
<input type="text" name="phone" v-model="item.phone"/>
</div>
<div class="form-group">
<label></label>
<button @click.prevent="createCustomer">Create</button>
</div>
</form>
</div>
</div>
js snippet
<script>
var ajaxHelper = new AjaxHelper();
var demo = new Vue({
el: '#app',
data: {
apiUrl: site_url + 'vtest/customers/',
company: {},
item: {}
},
methods: {
createCustomer: function () {
var vm = this,
callback = function (data) {
vm.company = data;
};
ajaxHelper.post(vm.apiUrl, vm.item, callback);
}
}
})
</script>