fix fetchParams func

projectdiscovery · Jan 3, 2024 · 79cdbbc · 79cdbbc
1 parent d9ae0e4
commit 79cdbbc
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/url/merge_test.go b/url/merge_test.go
@@ -48,6 +48,7 @@ func TestMergeUnsafePaths(t *testing.T) {
 		{"scanme.sh", "../../../etc/passwd", "/../../../etc/passwd"},
 		{"//scanme.sh", "/..%252F..%252F..%252F..%252F..%252F", "/..%252F..%252F..%252F..%252F..%252F"},
 		{"/?user=true", "/profile", "/profile?user=true"},
+		{"scanme.sh", "/?", "/?"},
 	}
 
 	for _, v := range testcase2 {

diff --git a/url/url.go b/url/url.go
@@ -214,13 +214,15 @@ func (u *URL) fetchParams() {
 		return
 	} else {
 		encodedParams := u.Original[index+1:]
+		if encodedParams == "" {
+			return
+		}
 		u.Params.Decode(encodedParams)
 		u.Original = u.Original[:index]
 	}
 	u.Update()
 }
 
-
 // copy parsed data from src to dst this does not include fragment or params
 func copy(dst *url.URL, src *url.URL) {
 	dst.Host = src.Host