Escape API

June 30, 2021 ยท View on GitHub

an API for escaping html, shell and path queries


Documentation

parameters

  • method escaping method
  • data string to be escaped

available methods

MethodDescriptionTypePrevention
htmlHTML escapestringXSS
shellUNIX bourne shell escapestringos command injection
pathUNIX path escapestringdirectory traversal

examples

curl "https://s.polarspetroll.repl.co/api?method=html&data=<>/>,test'"

output :

{
  "ok":true,
  "data":"&lt;&gt;/&gt;,test&#39;"
}

curl "https://s.polarspetroll.repl.co/api?method=shell&data=ls -la | cat /etc/passwd"

output:

{
  "ok":true,
  "data":"ls\\ -la\\ \\|\\ cat\\ /etc/passwd"
}

curl "https://s.polarspetroll.repl.co/api?method=path&data=../../../../../../../etc/passwd"

output:

{
  "ok":true,
  "data":"./././././././etc/passwd"
}