-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Theo Van Dinter writes:
> On Mon, Apr 19, 2004 at 03:37:13PM -0000, [EMAIL PROTECTED] wrote:
> > I think this method is still going to miss encoded redirects, though.
> > +    if (m{^https?://.+?(https?://.+)$}) {
> > +      push(@uris, $1);
> > +    }
> 
> It shouldn't.  The code above it deals with encoding, then that if
> statement strips out the top level redirect and puts the remaining URL
> back in the queue to be passed through the loop again.
> 
> However, your modification to the code stripped out the "$nuri =~"
> which kinda breaks things. :(  (r10104 committed to fix it)

I just checked in a fix to another regression --
http://redir1.com/x?http://redir2.com/y?http://payload.com/
would not be caught with the latest code.

Any chance of a t script to test it?

- --j.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Exmh CVS

iD8DBQFAhBD4QTcbUG5Y7woRAj1RAJ4rPSXRXMWL5OPBb2YjrI0iuFcivgCg3RFW
zBgvbDTiepreF96J9PquD7s=
=ItvA
-----END PGP SIGNATURE-----

Reply via email to