[waf]同时支持URL参数中的+和%20

iwind · iwind · commit 02d511515bf7 · 2020-06-11T11:53:53.000+08:00
diff --git a/teawaf/rule.go b/teawaf/rule.go
@@ -523,6 +523,7 @@ func (this *Rule) unescape(v string) string {
 	v = strings.Replace(v, `!`, `(!|%21)`, -1)
 	v = strings.Replace(v, `/`, `(/|%2F)`, -1)
 	v = strings.Replace(v, `;`, `(;|%3B)`, -1)
+	v = strings.Replace(v, `\+`, `(\+|%20)`, -1)
 	return v
 }
 

Original file line number	Diff line number	Diff line change
`@@ -523,6 +523,7 @@ func (this *Rule) unescape(v string) string {`
`523`	`523`	v = strings.Replace(v, `!`, `(!\|%21)`, -1)
`524`	`524`	v = strings.Replace(v, `/`, `(/\|%2F)`, -1)
`525`	`525`	v = strings.Replace(v, `;`, `(;\|%3B)`, -1)
	`526`	+ v = strings.Replace(v, `\+`, `(\+\|%20)`, -1)
`526`	`527`	`return v`
`527`	`528`	`}`
`528`	`529`