HTML meta refresh handling improvement

buffer · Nov 16, 2022 · caf9e3b · caf9e3b
1 parent 167fa76
commit caf9e3b
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/tests/samples/misc/meta_refresh.html b/tests/samples/misc/meta_refresh.html
@@ -4,7 +4,7 @@
     <meta http-equiv="refresh" />
     <meta http-equiv="refresh" content="" />
     <meta http-equiv="refresh" content="0;URL='data:text/html,<script>alert(alert);</script>'" />
-    <meta http-equiv="refresh" content="0;URL='https://buffer.github.io/thug/'" />
+    <meta http-equiv="refresh" content="0;URL=\'https://buffer.github.io/thug/\'" />
   </head>
   <body>
     Test

diff --git a/thug/DOM/DFT.py b/thug/DOM/DFT.py
@@ -1062,6 +1062,9 @@ def handle_meta_refresh(self, http_equiv, content):
         if url.startswith("'") and url.endswith("'"):
             url = url[1:-1]
 
+        if url.startswith("\\'") and url.endswith("\\'"):
+            url = url[2:-2]
+
         if url in log.ThugLogging.meta and log.ThugLogging.meta[url] >= 3:
             return # pragma: no cover