PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-06 04:31:29 +00:00
Code Issues Projects Releases Wiki Activity

Correctly handle parsing of invalid URL segments. Fixes #2651

Browse Source
This commit is contained in:
dmiller
2023-05-30 21:15:04 +00:00
parent 6bd98c22ea
commit 6a567c7c0a
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
nselib/url.lua
View File

@@ -67,7 +67,7 @@ local segment_set = make_set {
"-", "_", ".", "!", "~", "*", "'", "(", "-", "_", ".", "!", "~", "*", "'", "(",
")", ":", "@", "&", "=", "+", "$", ",", ")", ":", "@", "&", "=", "+", "$", ",",
} }
setmetatable(segment_set, { __index = hex_esc }) setmetatable(segment_set, { __index = function(t, c) return hex_esc(c) end })
--- ---
-- Protects a path segment, to prevent it from interfering with the -- Protects a path segment, to prevent it from interfering with the
@@ -91,7 +91,8 @@ local function absolute_path(base_path, relative_path)
end end
local path = relative_path local path = relative_path
if path:sub(1, 1) ~= "/" then if path:sub(1, 1) ~= "/" then
path = fixdots(base_path):gsub("[^/]*$", path) -- function wrapper to avoid %-substitution of captures
path = fixdots(base_path):gsub("[^/]*$", function() return path end)
end end
-- Break the path into segments, processing dot and dot-dot -- Break the path into segments, processing dot and dot-dot
local segs = {} local segs = {}