Improve security of browser version matching regex

2024-10-29 20:20:00 +10:00
parent 2cbe73a6c3
commit 6976117e9f
1 changed files with 1 additions and 1 deletions
--- a/core/filters/browser.rb
+++ b/core/filters/browser.rb
@@ -46,7 +46,7 @@ module BeEF
      return false if has_non_printable_char?(str)
      return true if str.eql? 'UNKNOWN'
      return true if str.eql? 'ALL'
-      return false if !nums_only?(str) and !str.match(/\A\d+(\.\d+)+\z/)
+      return false if !nums_only?(str) and !str.match(/\A(0|[1-9][0-9]{0,3})(\.(0|[1-9][0-9]{0,2})){0,3}\z/)
      return false if str.length > 20

      true