0.1.5
- Improve the accuracy of
Ronin::Vulns::OpenRedirect#vulnerable?
when detecting open redirects in meta-refresh HTML tags.- Match the test URL when it ends with
?...
,&...
, or&...
. - Detect when the test URL has an additional string appended to it (ex:
.html
). The appended string can easily be bypassed by adding a?
,&
, or#
character to the end of the test URL.
- Match the test URL when it ends with