Thanks to visit codestin.com Credit goes to github.com
We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 333f805 commit bbfa4b6Copy full SHA for bbfa4b6
1 file changed
lib/core/common.py
@@ -2681,6 +2681,11 @@ def _(value):
2681
warnMsg = "reflective value(s) found and filtering out"
2682
singleTimeWarnMessage(warnMsg)
2683
2684
+ if re.search(r"FRAME[^>]+src=[^>]*%s" % REFLECTED_VALUE_MARKER, retVal, re.I):
2685
+ warnMsg = "frames detected containing attacked parameter values. Please be sure to "
2686
+ warnMsg += "test those separately in case that attack on this page fails"
2687
+ singleTimeWarnMessage(warnMsg)
2688
+
2689
elif not kb.testMode and not kb.reflectiveCounters[REFLECTIVE_COUNTER.HIT]:
2690
kb.reflectiveCounters[REFLECTIVE_COUNTER.MISS] += 1
2691
if kb.reflectiveCounters[REFLECTIVE_COUNTER.MISS] > REFLECTIVE_MISS_THRESHOLD:
0 commit comments