Skip to content

Conversation

@HirokiNomura
Copy link
Contributor

Add payload which bypass quote escaping by using URL encoding so that the payload is decoded when it is clicked.

return True
else:
return False
tags = soup.findAll("a", attrs={"href": re.compile(r"^javascript:")})
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is the re.compile() going to execute multiple times with it being there?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, this is going to execute multiple times but once per an instance. We can't avoid that without declaring a compiled pattern as a global variable. I think it's fine to stay here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants