Better regex for CRLF injection that catches whitespaces

2020-05-27 21:38:40 +05:30 · 2020-05-27 21:38:40 +05:30 · 0ae2fe3c85
parent 386b4b0f07
commit 0ae2fe3c85
1 changed files with 1 additions and 1 deletions
--- a/vulnerabilities/crlf-injection.yaml
+++ b/vulnerabilities/crlf-injection.yaml
@ -13,5 +13,5 @@ requests:
    matchers:
      - type: regex
        regex:
-          - "(^Set-Cookie:|;(| ))( |)crlfinjection=crlfinjection($|;)"
+          - "^(?:Set-Cookie\s?:|;)\s?crlfinjection=crlfinjection(?:$|;)"
        part: header