Merge pull request #82 from MobSF/march2024

fix possible redirect ssrf
MobSF · Mar 22, 2024 · 35b2016 · 35b2016
2 parents 25c4322 + cd01b71
commit 35b2016
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/mobsfscan/__init__.py b/mobsfscan/__init__.py
@@ -6,7 +6,7 @@
 __title__ = 'mobsfscan'
 __authors__ = 'Ajin Abraham'
 __copyright__ = f'Copyright {datetime.now().year} Ajin Abraham, OpenSecurity'
-__version__ = '0.3.7'
+__version__ = '0.3.8'
 __version_info__ = tuple(int(i) for i in __version__.split('.'))
 __all__ = [
     '__title__',

diff --git a/mobsfscan/manifest.py b/mobsfscan/manifest.py
@@ -323,7 +323,7 @@ def check_url(self, w_url):
         try:
             r = requests.get(
                 w_url,
-                allow_redirects=True,
+                allow_redirects=False,
                 timeout=5)
             if not (str(r.status_code).startswith('2')
                     and iden in str(r.json())):