fu spammers

modified:   make_post_sell/request_methods.py
This commit is contained in:
Russell Ballestrini 2024-12-11 14:49:28 -05:00
parent 55b4599684
commit d9ef51031d

View file

@ -110,7 +110,7 @@ def includeme(config):
from pyramid.httpexceptions import HTTPUnauthorized
# Regex to detect nested encoded 'next=' patterns
next_pattern = re.compile(r"(next%25)+", re.IGNORECASE)
next_pattern = re.compile(r"(next(?:%25|%3D))+", re.IGNORECASE)
matches = next_pattern.findall(request.query_string)
if len(matches) > 1: