dblackshell,

    Please don't use top posting.

On Fri, Mar 27, 2009 at 5:17 PM, dblackshell <backbon...@gmail.com> wrote:
> "[^>]*" any number of characters which are not >... :)
>
> ---
> http://insanesecurity.info
>
>
> On Fri, Mar 27, 2009 at 10:12 PM, Andres Riancho <andres.rian...@gmail.com>
> wrote:
>>
>> Olle,
>>
>> On Fri, Mar 27, 2009 at 7:54 AM, olle <o...@nxs.se> wrote:
>> > Hi guys!
>> >
>> > The regexp in the ajax grep plugin sucks.
>>
>> Oh, I *love* emails that start like this! =)
>>
>> > It infiniloops on a current site
>> > I'm assessing. So I took the liberty of cleaning it up a bit. The new
>> > code
>> > does what I suspect the old one was trying to do, but isn't a complete
>> > and
>> > utter disaster performance wise. ;)
>> >
>> > I replaced these lines:
>> >
>> > regex_string = '< *?script.*?>.*?'
>> > ...
>> > regex_string += '.*?</ *?script *?>'
>> >
>> > with this:
>> >
>> > regex_string = '<\W*script[^>]*>.*'
>> > ...
>> > regex_string += '.*</\W*script[^>]*>'
>>
>> The \W seems to be ok.
>> But I don't fully understand the meaning of this section: "[^>]*",
>> could you explain it?

I understand that this is "any number of characters which are not >",
but... does this make any sense if you put it in front of a ">" like
this "<\W*script[^>]*>" ?

Are these equivalent?

<\W*script[^>]*>

<\W*script.*>

>> >
>> > Andres, could you please reveiew and check in this change?
>>
>> Sure, when we I understand your regex =)
>>
>> > Cheers,
>> >
>> > /olle
>> >
>> >
>> > ------------------------------------------------------------------------------
>> > _______________________________________________
>> > W3af-develop mailing list
>> > W3af-develop@lists.sourceforge.net
>> > https://lists.sourceforge.net/lists/listinfo/w3af-develop
>> >
>>
>>
>>
>> --
>> Andrés Riancho
>> http://www.bonsai-sec.com/
>> http://w3af.sourceforge.net/
>>
>>
>> ------------------------------------------------------------------------------
>> _______________________________________________
>> W3af-develop mailing list
>> W3af-develop@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/w3af-develop
>
>



-- 
Andrés Riancho
http://www.bonsai-sec.com/
http://w3af.sourceforge.net/

------------------------------------------------------------------------------
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop

Reply via email to