search

malpedia / feedback

Public Issue tracker to gather feedback for and allow discussions around Malpedia
31 stars 3 forks source link

Downloading YARA rules from a family page will lead to escaped content #34

Open danielplohmann opened 2 years ago

danielplohmann commented 2 years ago

Describe the bug When using the download button on a family page, the delivered YARA rule may contain HTML-escaped symbols, breaking the rule. Example are filesize comparisons in the condition (e.g. filesize < 123456), which will then include &lt; instead of the actual operator.