https://datawiz2.dev.zpid.de/?__proto__.xss=xss%3D

Method
GET
HTTP Status
200
IP
3.229.2.217
Profiled on
Token
5165a5

DashboardController :: landingAction

Request

GET Parameters

Key Value
__proto___xss 
"xss="

POST Parameters

No POST parameters

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller 
"App\View\Controller\DashboardController::landingAction"
_firewall_context 
"security.firewall.map.context.main"
_route 
"landing"
_route_params 
[]
_security_firewall_run 
"_security_main"
_stopwatch_token 
"ecb20d"

Request Headers

Header Value
accept-encoding 
"gzip,deflate"
host 
"datawiz2.dev.zpid.de"
user-agent 
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
x-forwarded-for 
"3.229.2.217"
x-forwarded-host 
"datawiz2.dev.zpid.de"
x-forwarded-port 
"443"
x-forwarded-proto 
"https"
x-forwarded-server 
"e76ed641e4ba"
x-php-ob-level 
"1"
x-real-ip 
"3.229.2.217"

Request Content

Request content not available (it was retrieved as a resource).

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"text/html; charset=UTF-8"
date 
"Fri, 22 Nov 2024 01:52:24 GMT"
x-debug-token 
"5165a5"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session 1

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

1 Usages
Stateless check enabled
Usage
Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage:44
Show trace 
[
  [
    "file" => "/app/vendor/symfony/security-core/Authentication/Token/Storage/UsageTrackingTokenStorage.php"
    "line" => 44
    "function" => "getMetadataBag"
    "class" => "Symfony\Component\HttpFoundation\Session\Session"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/symfony/twig-bridge/AppVariable.php"
    "line" => 82
    "function" => "getToken"
    "class" => "Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/twig/twig/src/Extension/CoreExtension.php"
    "line" => 1599
    "function" => "getUser"
    "class" => "Symfony\Bridge\Twig\AppVariable"
    "type" => "->"
  ]
  [
    "file" => "/app/var/cache/dev/twig/7a/7a0e364aa85fc7dd89614fd7734376b13641aa80dd1ae164907ddb71d64f143e.php"
    "line" => 43
    "function" => "twig_get_attribute"
  ]
  [
    "file" => "/app/vendor/twig/twig/src/Template.php"
    "line" => 394
    "function" => "doDisplay"
    "class" => "__TwigTemplate_6c2356d3d65cc6ecead593a321b91b3fc387c859e553898893ddc8524ad73d46"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/twig/twig/src/Template.php"
    "line" => 367
    "function" => "displayWithErrorHandling"
    "class" => "Twig\Template"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/twig/twig/src/Template.php"
    "line" => 379
    "function" => "display"
    "class" => "Twig\Template"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/twig/twig/src/TemplateWrapper.php"
    "line" => 40
    "function" => "render"
    "class" => "Twig\Template"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/twig/twig/src/Extension/CoreExtension.php"
    "line" => 1323
    "function" => "render"
    "class" => "Twig\TemplateWrapper"
    "type" => "->"
  ]
  [
    "file" => "/app/var/cache/dev/twig/91/91f057c22cc8fb27b214fc36497eb6fdbaacc86849a160fff374ba48b0c83d00.php"
    "line" => 232
    "function" => "twig_include"
  ]
  [
    "file" => "/app/vendor/twig/twig/src/Template.php"
    "line" => 171
    "function" => "block_header"
    "class" => "__TwigTemplate_f0207979ae9add6d28f5a54d902fea5d41e99bd0d516d6554857400dc256efbf"
    "type" => "->"
  ]
  [
    "file" => "/app/var/cache/dev/twig/91/91f057c22cc8fb27b214fc36497eb6fdbaacc86849a160fff374ba48b0c83d00.php"
    "line" => 129
    "function" => "displayBlock"
    "class" => "Twig\Template"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/twig/twig/src/Template.php"
    "line" => 394
    "function" => "doDisplay"
    "class" => "__TwigTemplate_f0207979ae9add6d28f5a54d902fea5d41e99bd0d516d6554857400dc256efbf"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/twig/twig/src/Template.php"
    "line" => 367
    "function" => "displayWithErrorHandling"
    "class" => "Twig\Template"
    "type" => "->"
  ]
  [
    "file" => "/app/var/cache/dev/twig/5f/5f9663de3443a60e031a5e9ad853df265094a46a67d92989aaecfab616490309.php"
    "line" => 49
    "function" => "display"
    "class" => "Twig\Template"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/twig/twig/src/Template.php"
    "line" => 394
    "function" => "doDisplay"
    "class" => "__TwigTemplate_7a0ea876506906977023bcfc7e1258787fa419e83f20b4fa9b4e7a831c69fc32"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/twig/twig/src/Template.php"
    "line" => 367
    "function" => "displayWithErrorHandling"
    "class" => "Twig\Template"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/twig/twig/src/Template.php"
    "line" => 379
    "function" => "display"
    "class" => "Twig\Template"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/twig/twig/src/TemplateWrapper.php"
    "line" => 40
    "function" => "render"
    "class" => "Twig\Template"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/twig/twig/src/Environment.php"
    "line" => 277
    "function" => "render"
    "class" => "Twig\TemplateWrapper"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/symfony/framework-bundle/Controller/AbstractController.php"
    "line" => 258
    "function" => "render"
    "class" => "Twig\Environment"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/symfony/framework-bundle/Controller/AbstractController.php"
    "line" => 266
    "function" => "renderView"
    "class" => "Symfony\Bundle\FrameworkBundle\Controller\AbstractController"
    "type" => "->"
  ]
  [
    "file" => "/app/source/View/Controller/DashboardController.php"
    "line" => 19
    "function" => "render"
    "class" => "Symfony\Bundle\FrameworkBundle\Controller\AbstractController"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 152
    "function" => "landingAction"
    "class" => "App\View\Controller\DashboardController"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 74
    "function" => "handleRaw"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/app/vendor/symfony/http-kernel/Kernel.php"
    "line" => 202
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/app/public/index.php"
    "line" => 20
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\Kernel"
    "type" => "->"
  ]
]

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
ALLOW_EMPTY_PASSWORD 
"yes"
API_KEYCLOAK_CLIENT 
""
API_KEYCLOAK_PASSWORD 
""
API_KEYCLOAK_USERNAME 
""
APP_DEBUG 
"1"
APP_ENV 
"dev"
APP_SECRET 
"4083bf3f708f5df9ee85aad2ae496194"
DATABASE_URL 
"mysql://datawiz2:Aklfohubvsiuwefr65745ak76@mariadb:3306/datawiz2"
DB_PASS 
"Aklfohubvsiuwefr65745ak76"
DB_USER 
"datawiz2"
OAUTH_KEYCLOAK_AUTH_SERVER_URL 
"https://sso.leibniz-psychology.org/auth"
OAUTH_KEYCLOAK_CLIENT_ID 
"datawiz2"
OAUTH_KEYCLOAK_CLIENT_SECRET 
"1e79e100-6207-4a94-9da5-13485ca67ae3"
OAUTH_KEYCLOAK_REALM 
"ZPID"
SYMFONY_DATABASE_PASSWORD 
""
TRUSTED_PROXIES 
"127.0.0.1,172.20.0.0/16"

Defined as regular env variables

Key Value
DOCUMENT_ROOT 
"/app/public"
HTTP_ACCEPT_ENCODING 
"gzip,deflate"
HTTP_HOST 
"datawiz2.dev.zpid.de"
HTTP_USER_AGENT 
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
HTTP_X_FORWARDED_FOR 
"3.229.2.217"
HTTP_X_FORWARDED_HOST 
"datawiz2.dev.zpid.de"
HTTP_X_FORWARDED_PORT 
"443"
HTTP_X_FORWARDED_PROTO 
"https"
HTTP_X_FORWARDED_SERVER 
"e76ed641e4ba"
HTTP_X_REAL_IP 
"3.229.2.217"
PHP_SELF 
"/index.php"
QUERY_STRING 
"__proto__.xss=xss%3D"
REMOTE_ADDR 
"172.20.0.5"
REMOTE_PORT 
"42058"
REQUEST_METHOD 
"GET"
REQUEST_TIME 
1732240344
REQUEST_TIME_FLOAT 
1732240344.3318
REQUEST_URI 
"/?__proto__.xss=xss%3D"
SCRIPT_FILENAME 
"/app/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_NAME 
"0.0.0.0"
SERVER_PORT 
"8000"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SOFTWARE 
"PHP 7.4.28 Development Server"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_SECRET,TRUSTED_PROXIES,DATABASE_URL,OAUTH_KEYCLOAK_CLIENT_ID,OAUTH_KEYCLOAK_CLIENT_SECRET,OAUTH_KEYCLOAK_AUTH_SERVER_URL,OAUTH_KEYCLOAK_REALM,APP_DEBUG,API_KEYCLOAK_USERNAME,API_KEYCLOAK_PASSWORD,API_KEYCLOAK_CLIENT,DB_USER,DB_PASS,SYMFONY_DATABASE_PASSWORD,ALLOW_EMPTY_PASSWORD"