We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 333f805 commit bbfa4b6Copy full SHA for bbfa4b6
1 file changed
lib/core/common.py
@@ -2681,6 +2681,11 @@ def _(value):
2681
warnMsg = "reflective value(s) found and filtering out"
2682
singleTimeWarnMessage(warnMsg)
2683
2684
+ if re.search(r"FRAME[^>]+src=[^>]*%s" % REFLECTED_VALUE_MARKER, retVal, re.I):
2685
+ warnMsg = "frames detected containing attacked parameter values. Please be sure to "
2686
+ warnMsg += "test those separately in case that attack on this page fails"
2687
+ singleTimeWarnMessage(warnMsg)
2688
+
2689
elif not kb.testMode and not kb.reflectiveCounters[REFLECTIVE_COUNTER.HIT]:
2690
kb.reflectiveCounters[REFLECTIVE_COUNTER.MISS] += 1
2691
if kb.reflectiveCounters[REFLECTIVE_COUNTER.MISS] > REFLECTIVE_MISS_THRESHOLD:
0 commit comments