{'context_id': 488, 'vulnerable': True, 'processing': False, 'request': {'url': 'https://www.wong.info/tagsterms.htm', 'method': 'POST', 'headers': {'HOST': '127.0.0.1:5000', 'USER_AGENT': 'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0', 'ACCEPT': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8', 'ACCEPT_LANGUAGE': 'en-US,en;q=0.5', 'ACCEPT_ENCODING': 'gzip, deflate, br, zstd', 'ORIGIN': 'http://127.0.0.1:5000', 'CONNECTION': 'keep-alive', 'REFERER': 'http://127.0.0.1:5000/guestbook', 'COOKIE': 'csrftoken=7GgBqVlBL6WuGdfu3e6EBXep8N5vFiVm; grafana_session=54c841e9cb2f4956a7c791efd284d120; grafana_session_expiry=1735995560; user_id=2; session_token=b3c634c91e1711c794704a031918a34b; session=eyJjc3JmX3Rva2VuIjoiMzNkNDNlNjA2MDhiMjdjZjBiMGI1Yzk3NWU4MDExZjRjYWMxMzRhNyJ9.Z5GBRA.Q8r4qzslZbU-6Y0h-x9F551fn1A', 'UPGRADE_INSECURE_REQUESTS': '1', 'SEC_FETCH_DEST': 'document', 'SEC_FETCH_MODE': 'navigate', 'SEC_FETCH_SITE': 'same-origin', 'SEC_FETCH_USER': '?1', 'PRIORITY': 'u=0, i', 'Content-Type': 'application/json', 'User-Agent': 'Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_6_5 rv:4.0; brx-IN) AppleWebKit/533.27.4 (KHTML, like Gecko) Version/5.0.5 Safari/533.27.4'}, 'body': b'csrfmiddlewaretoken=5fc046af-4ef6-4250-b016-93a8d5329fb4&newpass1=qbE1ItKc&newpass2=GoaHpDFv'}, 'control_flow': {0: "search_query = request.args.get('q')", 1: 'comments = db.get(search_query)', 2: 'db = init()', 3: "db = sqlite3.connect('data.db')", 4: "db.cursor().execute('CREATE TABLE IF NOT EXISTS comments (id INTEGER PRIMARY KEY, comment TEXT, date TEXT)')", 5: 'return db', 6: 'results = []', 7: "for(comment, date) in db.cursor().execute('SELECT comment, date FROM comments').fetchall():", 8: 'return results', 9: 'form = forms.AddCommentForm()', 10: 'if form.validate_on_submit():', 11: 'db.add(form.comment.data)', 12: 'db = init()', 13: "db = sqlite3.connect('data.db')", 14: "db.cursor().execute('CREATE TABLE IF NOT EXISTS comments (id INTEGER PRIMARY KEY, comment TEXT, date TEXT)')", 15: 'return db', 16: "db.cursor().execute('INSERT INTO comments (comment, date) VALUES (?, ?)', (comment, datetime.utcnow().strftime('%B %d %Y - %H:%M')))", 17: 'db.commit()', 18: "return redirect(url_for('guestbook'))"}, 'response': {'status_code': '400', 'headers': {'Content-Type': 'application/json', 'Content-Length': '207', 'Location': '/guestbook', 'Vary': 'Cookie'}}}