diff --git a/lib/techniques/error/use.py b/lib/techniques/error/use.py index 8171c9735..ab133a6ef 100644 --- a/lib/techniques/error/use.py +++ b/lib/techniques/error/use.py @@ -104,9 +104,6 @@ def __oneShotErrorUse(expression, field): warnMsg += trimmed logger.warn(warnMsg) - if isinstance(output, basestring): - output = htmlunescape(output).replace("
", "\n") - if any(map(lambda dbms: Backend.isDbms(dbms), [DBMS.MYSQL, DBMS.MSSQL])): if offset == 1: retVal = output @@ -121,6 +118,9 @@ def __oneShotErrorUse(expression, field): retVal = output break + if isinstance(retVal, basestring): + retVal = htmlunescape(retVal).replace("
", "\n") + retVal = __errorReplaceChars(retVal) dataToSessionFile("[%s][%s][%s][%s][%s]\n" % (conf.url, kb.injection.place, conf.parameters[kb.injection.place], expression, replaceNewlineTabs(retVal)))