Remove XSS from list of vulnerabilities (#21)

Author: ursachec

README.md

@@ -31,7 +31,6 @@ This project contains the following vulnerabilities:
 
 - Remote Code Execution
 - SQL injection
-- XSS
 - Insecure Deserialization
 - Directory Traversal
 - Open Redirect
@@ -47,7 +46,6 @@ $ grep vulnerability . -R -n | grep -v README
 ./flask_webgoat/actions.py:43: # vulnerability: Remote Code Execution
 ./flask_webgoat/users.py:37: # vulnerability: SQL Injection
 ./flask_webgoat/auth.py:17: # vulnerability: SQL Injection
-./flask_webgoat/ui.py:14: # vulnerability: XSS
 ./flask_webgoat/actions.py:60: # vulnerability: Insecure Deserialization
 ./flask_webgoat/actions.py:35: # vulnerability: Directory Traversal
 ./flask_webgoat/auth.py:45: # vulnerability: Open Redirect

flask_webgoat/ui.py

@@ -16,7 +16,6 @@ def search():
  try:
  query = "SELECT username, access_level FROM user WHERE username LIKE ?;"
  results = query_db(query, (query_param,))
- # vulnerability: XSS
  return render_template(
  "search.html", results=results, num_results=len(results), query=query_param
  )