c08c98415395b76371581432be55381f0f6e2b40,w3af/plugins/audit/format_string.py,format_string,_analyze_result,#format_string#,58

Before Change

                // Check if the error string is in the response

                if error in response.body and \
                error not in mutant.get_original_response_body():
                    desc = "A possible (detection is really hard...) format"\
                          " string vulnerability was found at: %s"
                    desc = desc % mutant.found_at()

After Change

        for error in self.ERROR_STRINGS:
            // Check if the error string is in the response
            if error not in response.body:
                continue

            if error in mutant.get_original_response_body():
                continue

            desc = ("A possible (detection is really hard...) format"

Instances