dblackshell, Please don't use top posting.
On Fri, Mar 27, 2009 at 5:17 PM, dblackshell <backbon...@gmail.com> wrote: > "[^>]*" any number of characters which are not >... :) > > --- > http://insanesecurity.info > > > On Fri, Mar 27, 2009 at 10:12 PM, Andres Riancho <andres.rian...@gmail.com> > wrote: >> >> Olle, >> >> On Fri, Mar 27, 2009 at 7:54 AM, olle <o...@nxs.se> wrote: >> > Hi guys! >> > >> > The regexp in the ajax grep plugin sucks. >> >> Oh, I *love* emails that start like this! =) >> >> > It infiniloops on a current site >> > I'm assessing. So I took the liberty of cleaning it up a bit. The new >> > code >> > does what I suspect the old one was trying to do, but isn't a complete >> > and >> > utter disaster performance wise. ;) >> > >> > I replaced these lines: >> > >> > regex_string = '< *?script.*?>.*?' >> > ... >> > regex_string += '.*?</ *?script *?>' >> > >> > with this: >> > >> > regex_string = '<\W*script[^>]*>.*' >> > ... >> > regex_string += '.*</\W*script[^>]*>' >> >> The \W seems to be ok. >> But I don't fully understand the meaning of this section: "[^>]*", >> could you explain it? I understand that this is "any number of characters which are not >", but... does this make any sense if you put it in front of a ">" like this "<\W*script[^>]*>" ? Are these equivalent? <\W*script[^>]*> <\W*script.*> >> > >> > Andres, could you please reveiew and check in this change? >> >> Sure, when we I understand your regex =) >> >> > Cheers, >> > >> > /olle >> > >> > >> > ------------------------------------------------------------------------------ >> > _______________________________________________ >> > W3af-develop mailing list >> > W3af-develop@lists.sourceforge.net >> > https://lists.sourceforge.net/lists/listinfo/w3af-develop >> > >> >> >> >> -- >> Andrés Riancho >> http://www.bonsai-sec.com/ >> http://w3af.sourceforge.net/ >> >> >> ------------------------------------------------------------------------------ >> _______________________________________________ >> W3af-develop mailing list >> W3af-develop@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/w3af-develop > > -- Andrés Riancho http://www.bonsai-sec.com/ http://w3af.sourceforge.net/ ------------------------------------------------------------------------------ _______________________________________________ W3af-develop mailing list W3af-develop@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/w3af-develop