fix possible redirect ssrf

MobSF · Mar 22, 2024 · cd01b71 · cd01b71
1 parent 61fd40b
commit cd01b71
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/mobsfscan/__init__.py b/mobsfscan/__init__.py
@@ -6,7 +6,7 @@
 __title__ = 'mobsfscan'
 __authors__ = 'Ajin Abraham'
 __copyright__ = f'Copyright {datetime.now().year} Ajin Abraham, OpenSecurity'
-__version__ = '0.3.7'
+__version__ = '0.3.8'
 __version_info__ = tuple(int(i) for i in __version__.split('.'))
 __all__ = [
     '__title__',

diff --git a/mobsfscan/manifest.py b/mobsfscan/manifest.py
@@ -323,7 +323,7 @@ def check_url(self, w_url):
         try:
             r = requests.get(
                 w_url,
-                allow_redirects=True,
+                allow_redirects=False,
                 timeout=5)
             if not (str(r.status_code).startswith('2')
                     and iden in str(r.json())):