rapid7/metasploit-framework

View on GitHub
modules/exploits/windows/browser/safari_xslt_output.rb

Summary

Maintainability
A
3 hrs
Test Coverage

Method on_request_uri has 57 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def on_request_uri(cli, request)
    # Check target before attacking
    agent = request.headers['User-Agent']
    if agent !~ /Windows NT 5\.1/ or agent !~ /Safari\/5/ or agent =~ /Chrome/
      print_error("This target isn't supported: #{agent.to_s}")
Severity: Major
Found in modules/exploits/windows/browser/safari_xslt_output.rb - About 2 hrs to fix

    Method initialize has 34 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def initialize(info = {})
        super(update_info(info,
          'Name'            => 'Apple Safari Webkit libxslt Arbitrary File Creation',
          'Description'     => %q{
              This module exploits a file creation vulnerability in the Webkit
    Severity: Minor
    Found in modules/exploits/windows/browser/safari_xslt_output.rb - About 1 hr to fix

      There are no issues that match your filters.

      Category
      Status