search

stamparm / DSXS

Damn Small XSS Scanner
424 stars 127 forks source link

question about REGULAR_PATTERNS #7

Closed jushjuhx closed 6 years ago

jushjuhx commented 6 years ago

for example, when using <!--[^>]*%abc|abc[^<]*--> to search <!-- abc--> xxxabc--> , this regex can capture the last abc--> , but abc--> is not in comment.

stamparm commented 6 years ago

So, basically, you are searching for cases with least probability where those regexes will fail? I can find lots of more cases, but not sure what's the point.

One question. Have you ever found any web page with response like <!-- abc--> xxxabc--> ? If answer is no, I am not sure what's the point of this issue