From d9ef51031d4d1d42fc09a67b4fb147e8da4c087c Mon Sep 17 00:00:00 2001 From: Russell Ballestrini Date: Wed, 11 Dec 2024 14:49:28 -0500 Subject: [PATCH] fu spammers modified: make_post_sell/request_methods.py --- make_post_sell/request_methods.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/make_post_sell/request_methods.py b/make_post_sell/request_methods.py index 9af9ac3..e52ae31 100644 --- a/make_post_sell/request_methods.py +++ b/make_post_sell/request_methods.py @@ -110,7 +110,7 @@ def includeme(config): from pyramid.httpexceptions import HTTPUnauthorized # Regex to detect nested encoded 'next=' patterns - next_pattern = re.compile(r"(next%25)+", re.IGNORECASE) + next_pattern = re.compile(r"(next(?:%25|%3D))+", re.IGNORECASE) matches = next_pattern.findall(request.query_string) if len(matches) > 1: