CERBERUS/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-08-03 22:29:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Removes dot and dot-dot path segments from parsed URLs

Browse source
This commit is contained in:
nnposter 2018-02-26 00:27:36 +00:00
parent 4303c2f6ea
commit fcac8c6e28
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
nselib/httpspider.lua
View file

@ -433,6 +433,9 @@ URL = {
-- and is simpler for now.
self.file = self.raw:match("^http[s]?://[^:/]*[:]?%d*(/[^#]*)") or '/'
self.path = parsed.path
-- Normalize the values; removes dot and dot-dot path segments
self.file = url.absolute("", self.file)
self.path = url.absolute("", self.path)
self.dir = self.path:match("^(.+%/)") or "/"
-- TODO: Use public suffix list to extract domain
self.domain= self.host:match("^[^%.]-%.(.*)")