PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-26 01:19:03 +00:00
Code Issues Projects Releases Wiki Activity

Don't bypass url.lua parsing in httpspider.

Browse Source
This commit is contained in:
dmiller
2018-02-28 03:43:12 +00:00
parent 37937e3f89
commit 502c082240
1 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
nselib/httpspider.lua
View File

@@ -429,9 +429,17 @@ URL = {
self.proto = parsed.scheme
self.host = parsed.ascii_host or parsed.host
self.port = tonumber(parsed.port) or url.get_default_port(self.proto)
-- XXX: This should be parsed via url.lua, but this legacy pattern works
-- and is simpler for now.
self.file = self.raw:match("^http[s]?://[^:/]*[:]?%d*(/[^#]*)") or '/'
-- "file" is the path, params, and query, but not the fragment
local fileparts = {parsed.path}
if parsed.params then
fileparts[#fileparts+1] = ";"
fileparts[#fileparts+1] = parsed.params
end
if parsed.query then
fileparts[#fileparts+1] = "?"
fileparts[#fileparts+1] = parsed.query
end
self.file = table.concat(fileparts)
self.path = parsed.path
-- Normalize the values; removes dot and dot-dot path segments
self.file = url.absolute("", self.file)