int13h/squert

Rule output interpreted as HTML

Closed this issue · 1 comments

In the 0.9.4 branch, the .inc/rule.php will output snort rules without sanitation. Some of the rules contain HTML tags such as <script> so the browser interprets this information as HTML and you are unable to see the complete definition of the rule. Using the htmlspecialchars function corrects the rule so it can be displayed by the browser properly.

Hello,
I setup squert with sguil, and it is working fine. however, if I click on a alert, its displays the error below:

"No match for signature ID 2006435

file: n/a:n/a"

In the file .inc/config.php, I made the following configuration, but it is still not working.
$rulePath = "/etc/snort/rules";

Please help if you can.