daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update express-lfr.yaml

patch-1
Prince Chaddha 2023-06-28 10:52:51 +05:30 committed by GitHub
parent 15ca31a15f
commit 4cec45fdb4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
file/nodejs/express-lfr.yaml
View File

@ -14,8 +14,7 @@ file:
matchers:
- type: regex
regex:
- "$INP = <... \\$REQ\\.\\$QUERY ...>\\;"
- "$RES\\.render\\(\\$VIEW, <... \\$INP ...>\\)"
- "$RES.render\\($VIEW, <... $REQ.$QUERY.$FOO ...>\\)"
- "$RES\\.render\\(\\$VIEW, <... \\$REQ\\.\\$BODY ...>\\)"
- "(\\$[\\w\\W]+?)\\.render\\(\\$[\\w\\W]+?, <[\\w\\W]+? \\\\$[\\w\\W]+? [\\w\\W]+? >\\)"
- "(\\$[\\w\\W]+?)\\.render\\(\\$[\\w\\W]+?, <[\\w\\W]+? \\\\$[\\w\\W]+?\\.\\$[\\w\\W]+? [\\w\\W]+? >\\)"
- "(\\$[\\w\\W]+?)\\.render\\(\\$[\\w\\W]+?, <[\\w\\W]+? \\\\$[\\w\\W]+? [\\w\\W]+? >\\)"
condition: or