Less false positives for var_dump (#629)

CERT-Polska · Nov 9, 2023 · f3b86c5 · f3b86c5
1 parent 89171c9
commit f3b86c5
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/artemis/reporting/modules/bruter/classifier.py b/artemis/reporting/modules/bruter/classifier.py
@@ -22,6 +22,11 @@ def is_password_file(found_url: FoundURL) -> bool:
 
 
 def is_php_var_dump(found_url: FoundURL) -> bool:
+    if "/INSTALL" in found_url.url:
+        # Some installation documentation files have fragments that have been mistaken
+        # for var_dumps - let's skip them.
+        return False
+
     if " => " in found_url.content_prefix and (
         "array (" in found_url.content_prefix
         or "array(" in found_url.content_prefix