sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-06-22 22:13:08 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix for a google bug reported by Brandon E.

Browse Source
This commit is contained in:
Miroslav Stampar 2010-10-01 08:03:39 +00:00
parent 49915f3c33
commit 0ad8090ad8
3 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
doc/THANKS
View File

@ -68,6 +68,9 @@ Dan Guido <dguido@gmail.com>
Vulnerability Analysis class at the Polytechnic University of New York, Vulnerability Analysis class at the Polytechnic University of New York,
http://isisblogs.poly.edu/courses/pentest/ http://isisblogs.poly.edu/courses/pentest/
Brandon E. <brandonpoc@gmail.com>
for reporting a bug
Adam Faheem <faheem.adam@is.co.za> Adam Faheem <faheem.adam@is.co.za>
for reporting a few bugs for reporting a few bugs

6
lib/core/convert.py
View File

@ -106,3 +106,9 @@ def utf8encode(string):
def utf8decode(string): def utf8decode(string):
return string.decode("utf-8") return string.decode("utf-8")
def htmlescape(string):
return string.replace('&', '&amp;').replace('<', '&lt;').replace('>', '&gt;').replace('"', '&quot;').replace("'", '&#39;')
def htmlunescape(string):
return string.replace('&amp;', '&').replace('&lt;', '<').replace('&gt;', '>').replace('&quot;', '"').replace('&#39;', "'")

3
lib/utils/google.py
View File

@ -28,6 +28,7 @@ import socket
import urllib2 import urllib2
from lib.core.common import getUnicode from lib.core.common import getUnicode
from lib.core.convert import htmlunescape
from lib.core.convert import urlencode from lib.core.convert import urlencode
from lib.core.data import conf from lib.core.data import conf
from lib.core.data import kb from lib.core.data import kb
@ -71,7 +72,7 @@ class Google:
for match in self.__matches: for match in self.__matches:
if re.search("(.*?)\?(.+)", match, re.I): if re.search("(.*?)\?(.+)", match, re.I):
kb.targetUrls.add(( match, None, None, None )) kb.targetUrls.add(( htmlunescape(match), None, None, None ))
def getCookie(self): def getCookie(self):
""" """