From db992a0a864a7a6b2d4f3c4061d5cf372ce1c180 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Sun, 20 Mar 2011 23:16:34 +0000 Subject: [PATCH] mssql likes to htmlescape error reports --- lib/techniques/error/use.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/lib/techniques/error/use.py b/lib/techniques/error/use.py index 2dd89a153..a48087cb4 100644 --- a/lib/techniques/error/use.py +++ b/lib/techniques/error/use.py @@ -22,6 +22,7 @@ from lib.core.common import listToStrValue from lib.core.common import randomInt from lib.core.common import replaceNewlineTabs from lib.core.common import safeStringFormat +from lib.core.convert import htmlunescape from lib.core.data import conf from lib.core.data import kb from lib.core.data import logger @@ -76,6 +77,9 @@ def __oneShotErrorUse(expression, field): if threadData.lastRedirectMsg and threadData.lastRedirectMsg[0] == \ threadData.lastRequestUID else None, re.DOTALL | re.IGNORECASE) + if isinstance(output, basestring): + output = htmlunescape(output).replace("
", "\n").strip() + if Backend.getIdentifiedDbms() == DBMS.MYSQL: if offset == 1: retVal = output