[W3af-develop] XSS context detection performance improvements
Status: Beta
Brought to you by:
andresriancho
From: Andres R. <and...@gm...> - 2014-02-26 13:43:57
|
List, Taras, After finding a bug where the context detection for XSS was performing very poorly [0] (more than 3 minutes to run get_context on an HTML) I decided to work a little bit on it and improve it. The performance improvement was amazing ;) The changes are well documented here [1][2] When I started running the test suite for context detection took 2.5 seconds, now after the performance improvements it takes 0.098 seconds! Not bad, huh? @Taras: Since you wrote that code in the first place you might be interested in taking a look at the improvements and correcting any mistakes I might have made. Thanks! [0] https://github.com/andresriancho/w3af/issues/1171 [1] https://github.com/andresriancho/w3af/commits/feature/module/w3af/core/data/context/context.py [2] https://github.com/andresriancho/w3af/blob/feature/module/w3af/core/data/context/context.py Regards, -- Andrés Riancho Project Leader at w3af - http://w3af.org/ Web Application Attack and Audit Framework Twitter: @w3af GPG: 0x93C344F3 |