Polyglot on slightlymorehttps://slightlymore.co.uk/tags/polyglot/Recent content in Polyglot on slightlymoreHugoen-GB<a href="https://creativecommons.org/licenses/by/4.0/" target="_blank" rel="license">CC BY 4.0</a> by Clinton MontagueSun, 11 Jan 2026 22:18:42 +0000A string to test for template injection vulnerabilitieshttps://slightlymore.co.uk/a-string-to-test-for-template-injection-vulnerabilities/Sun, 11 Jan 2026 00:00:00 +0000https://slightlymore.co.uk/a-string-to-test-for-template-injection-vulnerabilities/<p>The following string can be used to test a large number of templating engines in one go:</p> <pre tabindex="0"><code>$ { { &lt; % [ % &#39; &#34; } } % \ . </code></pre><blockquote> <p>[!IMPORTANT] Remove the spaces between each character! I&rsquo;ve included them here because it messes up rendering in some places!</p> </blockquote>