xss-path.yaml

template:
   name: xss-path
   severity: medium
   author: zoidsec
   description: Cross-Site-Scripting Path Based

request:
   payloads: 
      - '"><script>alert(1)</script>'

   paths: true
   exclude: 
      - .png
      - .svg
      - .tiff
      - .woff
      - .woff2
      - .js
      - .jpg
      - .gif
      - .css
response:
   statusCode: 200
   patterns: 
      - '"><script>alert(1)</script>'