Merge pull request honze-net#4 from SvenTo/master

honze-net · web-flow · commit 5a8c84c1f93e · 2018-11-05T21:16:39.000+01:00
Added no-referrer meta tag and subresource integrity
diff --git a/README.md b/README.md
@@ -1,17 +1,38 @@
 # nmap-bootstrap-xsl
+
 A Nmap XSL implementation with Bootstrap.
+
 ## How to use
-Add the nmap-bootstrap.xsl as stylesheet to your Nmap scan. For example: `nmap -sS -T4 -A -sC -oA scanme --stylesheet https://raw.githubusercontent.com/honze-net/nmap-bootstrap-xsl/master/nmap-bootstrap.xsl scanme.nmap.org scanme2.nmap.org`
-Open the scanme.xml with your Webbrowser. It should look like the [scanme.html sample report](http://htmlpreview.github.io/?https://github.com/honze-net/nmap-bootstrap-xsl/blob/master/scanme.html).
-Alternatively you can transform the xml to html with `xsltproc -o scanme.html nmap-bootstrap.xsl scanme.xml`. You will need to download the nmap-bootstrap.xsl beforehand.
-## Old scans
-You can also format old scans with the xsl stylesheet. Insert
-```<?xml-stylesheet href="https://raw.githubusercontent.com/honze-net/nmap-bootstrap-xsl/master/nmap-bootstrap.xsl" type="text/xsl"?>```
-after `<!DOCTYPE nmaprun>`.
 
+- Add the `nmap-bootstrap.xsl` as stylesheet to your Nmap scan. 
+- Example: 
+
+```sh
+nmap -sS -T4 -A -sC -oA scanme --stylesheet https://raw.githubusercontent.com/honze-net/nmap-bootstrap-xsl/master/nmap-bootstrap.xsl scanme.nmap.org scanme2.nmap.org
+```
+
+- Open the scanme.xml with your Web browser. It should look like the [`scanme.html sample report`](http://htmlpreview.github.io/?https://github.com/honze-net/nmap-bootstrap-xsl/blob/master/scanme.html).
+- Alternatively you can transform the xml to html with
+
+```sh
+xsltproc -o scanme.html nmap-bootstrap.xsl scanme.xml
+```
+
+- You will need to download the nmap-bootstrap.xsl beforehand.
 
+## Old scans
+
+- You can also format old scans with the xsl stylesheet.
+- Insert `<?xml-stylesheet href="https://raw.githubusercontent.com/honze-net/nmap-bootstrap-xsl/master/nmap-bootstrap.xsl" type="text/xsl"?>` after `<!DOCTYPE nmaprun>`.
 
 ## Screenshots
+
 ![scanme screenshot 1](https://raw.githubusercontent.com/honze-net/nmap-bootstrap-xsl/master/scanme-screenshot1.png)
+
 ![scanme screenshot 2](https://raw.githubusercontent.com/honze-net/nmap-bootstrap-xsl/master/scanme-screenshot2.png)
+
 ![scanme screenshot 2](https://raw.githubusercontent.com/honze-net/nmap-bootstrap-xsl/master/scanme-screenshot3.png)
+
+## Demos
+
+- [`HackTheBox - Poison on YouTube`](https://www.youtube.com/watch?v=rs4zEwONzzk&t=56s)
diff --git a/nmap-bootstrap.xsl b/nmap-bootstrap.xsl
@@ -9,12 +9,14 @@ Andreas Hontzia (@honze_net)
   <xsl:template match="/">
     <html lang="en">
       <head>
+        <meta name="referrer" content="no-referrer" />
+        
         <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous"/>
         <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css" integrity="sha384-rHyoN1iRsVXV4nD0JutlnGaslCJuC7uwjduW9SVrLvRYooPp2bWYgmgJQIXwl/Sp" crossorigin="anonymous"/>
-        <link rel="stylesheet" type="text/css" href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap.min.css"/>
-        <script src="https://code.jquery.com/jquery-3.3.1.js"></script>
-        <script src="https://cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
-        <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap.min.js"></script>
+        <link rel="stylesheet" href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap.min.css" type="text/css" integrity="sha384-VEpVDzPR2x8NbTDZ8NFW4AWbtT2g/ollEzX/daZdW/YvUBlbgVtsxMftnJ84k0Cn" crossorigin="anonymous" />
+        <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha384-fJU6sGmyn07b+uD1nMk7/iSb4yvaowcueiQhfVgQuD98rfva8mcr1eSvjchfpMrH" crossorigin="anonymous"></script>
+        <script src="https://cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js" integrity="sha384-rgWRqC0OFPisxlUvl332tiM/qmaNxnlY46eksSZD84t+s2vZlqGeHrncwIRX7CGp" crossorigin="anonymous"></script>
+        <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap.min.js" integrity="sha384-7PXRkl4YJnEpP8uU4ev9652TTZSxrqC8uOpcV1ftVEC7LVyLZqqDUAaq+Y+lGgr9" crossorigin="anonymous"></script>
         <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script>
         <style>
           .target:before {
