CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-08-28 04:33:16 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Minor patch

Browse source
This commit is contained in:
Miroslav Štampar 2026-06-05 13:27:48 +02:00
parent dca0bb648d
commit 0ac9883767
3 changed files with 4 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/core/common.py
View file

@ -2971,11 +2971,10 @@ def urldecode(value, encoding=None, unsafe="%%?&=;+%s" % CUSTOM_INJECTION_MARK_C
result = _urllib.parse.unquote_plus(value) if spaceplus else _urllib.parse.unquote(value)
else:
result = value
charset = set(string.printable) - set(unsafe)
def _(match):
char = decodeHex(match.group(1), binary=False)
return char if char in charset else match.group(0)
return char if char not in unsafe else match.group(0)
if spaceplus:
result = result.replace('+', ' ') # plus sign has a special meaning in URL encoded data (hence the usage of _urllib.parse.unquote_plus in convall case)