Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix parent_url() to remove querystring #1820

Merged
merged 3 commits into from
Oct 5, 2024
Merged

Fix parent_url() to remove querystring #1820

merged 3 commits into from
Oct 5, 2024

Conversation

liquidsec
Copy link
Collaborator

@liquidsec liquidsec commented Oct 4, 2024

When querystring was present (like when parameter extraction is enabled) the parent_url helper was retaining the querystring as it traversed up the directory structure, leading to malformed URLs being speculated.

Copy link

codecov bot commented Oct 4, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 93%. Comparing base (0aad57e) to head (495a452).
Report is 4 commits behind head on dev.

Additional details and impacted files
@@          Coverage Diff          @@
##             dev   #1820   +/-   ##
=====================================
+ Coverage     93%     93%   +1%     
=====================================
  Files        348     348           
  Lines      27162   27163    +1     
=====================================
+ Hits       25060   25062    +2     
+ Misses      2102    2101    -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@TheTechromancer TheTechromancer changed the title Parent_url was retaining querystring Fix parent_url() to remove querystring Oct 4, 2024
@TheTechromancer TheTechromancer mentioned this pull request Oct 4, 2024
1 task
@liquidsec liquidsec merged commit 2054428 into dev Oct 5, 2024
8 checks passed
@liquidsec liquidsec deleted the parent-url-bug branch October 5, 2024 03:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants