INNER CODE UNIT · Python

logout

The-Art-of-Hacking/websploit · additional-labs/token-tower/app.py:546

def logout():
    response = make_response(redirect('/'))
    response.delete_cookie('auth_token')
    response.delete_cookie('token_algorithm')
    return response


@app.route('/dashboard')
def dashboard():
    token = request.cookies.get('auth_token')
    
    if not token:
        return redirect('/login')
    
    try:
        # VULNERABILITY: Multiple algorithm vulnerabilities
        data = verify_token_vulnerable(token)
        

View source record →