Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

{http,smtp}/entities: Align header regexes with extract_filename_from_content_disposition()

Browse source
This commit is contained in:
Arne Welzel 2022-10-18 19:53:46 +02:00 • committed by Tim Wojtulewicz
parent 6ef9423f3c
commit 8b04868de3
6 changed files with 43 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/base/protocols/http/entities.zeek
View file

@ -98,7 +98,7 @@ event http_header(c: connection, is_orig: bool, name: string, value: string) &pr
}
if ( name == "CONTENT-DISPOSITION" &&
/[fF][iI][lL][eE][nN][aA][mM][eE]/ in value )
/[fF][iI][lL][eE][nN][aA][mM][eE][[:blank:]]*\*?=/ in value )
{
c$http$current_entity$filename = extract_filename_from_content_disposition(value);
}