nbs-system / nxtool-ng

Because life is too short to waste your time transforming naxsi logs to rules by hand
42 stars 13 forks source link

Implement regressive matching on url #13

Open jvoisin opened 7 years ago

jvoisin commented 7 years ago

It would be great to have regressive matching on url, like:

would result in a rule on ^/pif/.

buixor commented 7 years ago

Do you mean : ^/pif/[a-z/]+(\.gif)*$? Generating regex without supervision sounds quite dangerous, as one might abuse the regex, with an url such as /pif/../../../another-file.php

jvoisin commented 7 years ago

.. won't be allowed, yes.