Proposed change

Currently, the WAF scan has an xss parameter that is passed directly to the fuzzer for scans. However, this breaks the graph output in HTML because of the unescaped HTML script tags <script> present in that parameter.

To fix this, I added a unicode replacement for the tags, which will allow nettacker to use the same parameter and not affect the scans, while also making the graph work.

BEFORE

UPDATED

Type of change

• New core framework functionality
• Bugfix (non-breaking change which fixes an issue)
• Code refactoring without any functionality changes
• New or existing module/payload change
• Documentation/localization improvement
• Test coverage improvement
• Dependency upgrade
• Other improvement (best practice, cleanup, optimization, etc)

Checklist

• I've followed the contributing guidelines
• I've run make pre-commit, it didn't generate any changes
• I've run make test, all tests passed locally