Spaces:

attacker-exploiting-everyone
/

gradio

Sleeping

attacker-exploiting-everyone commited on Sep 30, 2024

Commit

405b177

verified ·

1 Parent(s): 7cf86e1

Update app.py

Files changed (1) hide show

app.py CHANGED Viewed

@@ -1,7 +1,9 @@
 import gradio as gr
 def greet(name):
     return "Hello " + name + "!!"
-demo = gr.Interface(fn=greet, inputs="text", outputs="text")
 demo.launch()

 import gradio as gr
 def greet(name):
+    # Vulnerable to XSS: unsanitized user input directly returned
     return "Hello " + name + "!!"
+# Allow raw HTML rendering
+demo = gr.Interface(fn=greet, inputs="text", outputs="html")
 demo.launch()