• Stars
    star
    248
  • Rank 163,560 (Top 4 %)
  • Language
    JavaScript
  • License
    MIT License
  • Created almost 8 years ago
  • Updated about 1 year ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates.

Template generator

A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates.

Thoughts:

  1. I turned off HTML sanitization to make code with <, >, " etc inside:
this kind of content

So it's easily XSS:able as it is now.

  1. I had to hack a bit in strapdown.js due to messy location of files.
  2. I had to hack a bit in handlebar.js since I wanted to use {{lookup}} as a param, and that wasn't possible to turn off even though I removed it as a helper.
  3. Didn't do anything with images, since these still needs to be uploaded elsewhere. A tip here is to name them with what they contain so the tags are easily changeable whenever you use this in your report.

How to run

php -S localhost:8000

Place a bunch of .md files in the /tpls/ dir. They should show up in the dropdown. It saves now on every keystroke and will remember the data using localStorage. It will also reuse the variables if you switch template.

Disclaimer

This was a weekend project, took a few hours but was totally worth it (was able to gain speed quick using it). It's really messy but, hey, it works.

\o/

Frans Rosén @fransrosen

More Repositories

1

postMessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon
JavaScript
1,006
star
2

bountyplz

Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)
Shell
440
star
3

unpack-burp

For unpacking base64:ed "Save items"-content from Burp (From search + proxy history)
PHP
49
star
4

bountytpl

bountytpl – template generator cli. By using a template similar to the ones for Template Generator (https://github.com/fransr/template-generator) you can combine it with a JSON to produce a proper report.
Shell
45
star
5

hot-jar-swapping-urlclassloader

Demo of the URLClassLoader JAR-swapping showing the ability to replace and exploit an already loaded JAR with inner classes
Java
30
star
6

detectify-cli

Detectify API v2 CLI using bash
Shell
6
star
7

WSDL-Viewer-for-PHP

Used to get a visible overview of a WSDL service. The class will also show a test request/response built up according to the spec.
PHP
6
star
8

epl2html-render

Will render an EPL in simple HTML. good for creating EPLs
PHP
5
star
9

posten-mypack-label-pdf

Generating a MyPack-label PDF using TCPDF
PHP
2
star
10

test111

HTML
2
star
11

Time-Register

AIR application doing time reporting using Google Calendar API
2
star
12

YS-Filter

Fast javascript filter that collects information about products and creates a filtering options out of them.
2
star
13

li-shortblock

Chrome Extension that adds a shortcut on linkedin to block users from the feed-view
JavaScript
2
star
14

heroku-buildpack-letsencrypt

Shell
1
star
15

.well-known

1
star
16

test123

HTML
1
star
17

heroku-buildpack-s3

Shell
1
star