dblackshell,
Please don't use top posting.
On Fri, Mar 27, 2009 at 5:17 PM, dblackshell <[email protected]> wrote:
> "[^>]*" any number of characters which are not >... :)
>
> ---
> http://insanesecurity.info
>
>
> On Fri, Mar 27, 2009 at 10:12 PM, Andres Riancho <[email protected]>
> wrote:
>>
>> Olle,
>>
>> On Fri, Mar 27, 2009 at 7:54 AM, olle <[email protected]> wrote:
>> > Hi guys!
>> >
>> > The regexp in the ajax grep plugin sucks.
>>
>> Oh, I *love* emails that start like this! =)
>>
>> > It infiniloops on a current site
>> > I'm assessing. So I took the liberty of cleaning it up a bit. The new
>> > code
>> > does what I suspect the old one was trying to do, but isn't a complete
>> > and
>> > utter disaster performance wise. ;)
>> >
>> > I replaced these lines:
>> >
>> > regex_string = '< *?script.*?>.*?'
>> > ...
>> > regex_string += '.*?</ *?script *?>'
>> >
>> > with this:
>> >
>> > regex_string = '<\W*script[^>]*>.*'
>> > ...
>> > regex_string += '.*</\W*script[^>]*>'
>>
>> The \W seems to be ok.
>> But I don't fully understand the meaning of this section: "[^>]*",
>> could you explain it?
I understand that this is "any number of characters which are not >",
but... does this make any sense if you put it in front of a ">" like
this "<\W*script[^>]*>" ?
Are these equivalent?
<\W*script[^>]*>
<\W*script.*>
>> >
>> > Andres, could you please reveiew and check in this change?
>>
>> Sure, when we I understand your regex =)
>>
>> > Cheers,
>> >
>> > /olle
>> >
>> >
>> > ------------------------------------------------------------------------------
>> > _______________________________________________
>> > W3af-develop mailing list
>> > [email protected]
>> > https://lists.sourceforge.net/lists/listinfo/w3af-develop
>> >
>>
>>
>>
>> --
>> Andrés Riancho
>> http://www.bonsai-sec.com/
>> http://w3af.sourceforge.net/
>>
>>
>> ------------------------------------------------------------------------------
>> _______________________________________________
>> W3af-develop mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/w3af-develop
>
>
--
Andrés Riancho
http://www.bonsai-sec.com/
http://w3af.sourceforge.net/
------------------------------------------------------------------------------
_______________________________________________
W3af-develop mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/w3af-develop
