diff --git a/vulnerabilities/open-redirect.yaml b/vulnerabilities/open-redirect.yaml index 5712f4ab73..d75eee346b 100644 --- a/vulnerabilities/open-redirect.yaml +++ b/vulnerabilities/open-redirect.yaml @@ -16,5 +16,5 @@ requests: matchers: - type: regex regex: - - "^Location\\:(| *| (http|https)\\:\\/\\/| *\\/\\/| [a-zA-Z]*\\.| (http|https)\\:\\/\\/[a-zA-Z]*\\.)evil\\.com" + - '^Location:\s?(?:(?:http|https)://|//|[a-zA-Z0-9\-_]+\.|(?:http|https)://[a-zA-Z0-9\-_]+\.)?evil\.com' part: header