fix for proper MSSQL error chunking in some cases (not screwing output length toward lower values at chunk phase)

stamparm · stamparm · commit 83fac3f6d929 · 2011-05-03T21:12:51.000Z
diff --git a/lib/techniques/error/use.py b/lib/techniques/error/use.py
@@ -104,9 +104,6 @@ def __oneShotErrorUse(expression, field):
                 warnMsg += trimmed
                 logger.warn(warnMsg)
 
-        if isinstance(output, basestring):
-            output = htmlunescape(output).replace("<br>", "\n")
-
         if any(map(lambda dbms: Backend.isDbms(dbms), [DBMS.MYSQL, DBMS.MSSQL])):
             if offset == 1:
                 retVal = output
@@ -121,6 +118,9 @@ def __oneShotErrorUse(expression, field):
             retVal = output
             break
 
+    if isinstance(retVal, basestring):
+        retVal = htmlunescape(retVal).replace("<br>", "\n")
+
     retVal = __errorReplaceChars(retVal)
 
     dataToSessionFile("[%s][%s][%s][%s][%s]\n" % (conf.url, kb.injection.place, conf.parameters[kb.injection.place], expression, replaceNewlineTabs(retVal)))
