olle schrieb:
> I replaced these lines:
> 
> regex_string = '< *?script.*?>.*?'
> ...
> regex_string += '.*?</ *?script *?>'
> 
> with this:
> 
> regex_string = '<\W*script[^>]*>.*'
> ...
> regex_string += '.*</\W*script[^>]*>'

hmm, has anybody seen a browser which allows tags like this?
IMHO only following regex matches valid tags:
        ^<[a-zA-Z].*

Note: this matches <sci\tpt also (which is a valid <script for some IE)

Achim


------------------------------------------------------------------------------
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop

Reply via email to