Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update CVE-2015-2863.yaml #9793

Merged
merged 1 commit into from
May 16, 2024
Merged

Update CVE-2015-2863.yaml #9793

merged 1 commit into from
May 16, 2024

Conversation

Ahsraeisi
Copy link
Contributor

False Positive mitigation

@Ahsraeisi Ahsraeisi changed the title Main Update CVE-2015-2863.yaml May 14, 2024
@ritikchaddha ritikchaddha self-assigned this May 14, 2024
@ritikchaddha
Copy link
Contributor

Hi there, @Ahsraeisi. Could you please explain the type of FP results you are getting with this regex?

@Ahsraeisi
Copy link
Contributor Author

Ahsraeisi commented May 14, 2024 •
edited

Sure.
For example, the old regex considers Location: example.com or Location: .example.com as an Open Redirect. However, browsers consider this as an internal redirection.

Ex: https://labs.hackxpert.com/OPENREDIRECT/10.php?url=example.com

Look at this: https://regex101.com/r/1XwU1f/1

@ritikchaddha

@ritikchaddha ritikchaddha added the Done Ready to merge label May 16, 2024
@ritikchaddha ritikchaddha merged commit 6f978ac into projectdiscovery:main May 16, 2024
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@ritikchaddha ritikchaddha

Labels
Done Ready to merge
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@Ahsraeisi @ritikchaddha