Skip to content

Commit

Permalink
sqlmap improvements
Browse files Browse the repository at this point in the history
  • Loading branch information
kazet committed Feb 24, 2024
1 parent e126972 commit 1e5dcbf
Showing 1 changed file with 1 addition and 2 deletions.
3 changes: 1 addition & 2 deletions karton_sqlmap/karton_sqlmap.py
Original file line number Diff line number Diff line change
Expand Up @@ -87,7 +87,6 @@ def _run() -> Optional[str]:
data_str = data.decode("ascii", errors="ignore")
self.log.info("url %s, cmd %s, output %s", url, cmd, data_str)


for line in data_str.split("\n"):
match_result = re.compile(f"^{re.escape(find_in_output)}[^:]*: '(.*)'$").fullmatch(line)
if match_result:
Expand Down Expand Up @@ -288,7 +287,7 @@ def run(self, current_task: Task) -> None:

new_url = urllib.parse.urljoin(url, tag[attribute])

new_url = new_url.split('#')[0]
new_url = new_url.split("#")[0]

if any(new_url.endswith(extension) for extension in [".png", ".jpg", ".svg", ".jpeg", ".css"]):
# Let's not inject image/style paths
Expand Down

0 comments on commit 1e5dcbf

Please sign in to comment.