Relaxed bundleid regex

MobSF · Dec 3, 2023 · 88904e8 · 88904e8
1 parent 2aecb90
commit 88904e8
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/mobsf/MobSF/urls.py b/mobsf/MobSF/urls.py
@@ -275,13 +275,13 @@
         re_path(r'^ios/system_logs/$',
                 instance.system_logs,
                 name='ios_system_logs'),
-        re_path(r'^ios/download_data/(?P<bundle_id>([\w]*\.)+[\w]{2,155})$',
+        re_path(r'^ios/download_data/(?P<bundle_id>([\w]*\.)+[\w-]{2,155})$',
                 instance.download_data,
                 name='ios_download_data'),
         re_path(r'^ios/instrument/$',
                 ios_tests_frida.ios_instrument,
                 name='ios_instrument'),
-        re_path(r'^ios/view_report/(?P<bundle_id>([\w]*\.)+[\w]{2,155})$',
+        re_path(r'^ios/view_report/(?P<bundle_id>([\w]*\.)+[\w-]{2,155})$',
                 ios_view_report.ios_view_report,
                 name='ios_view_report'),
 

diff --git a/mobsf/MobSF/utils.py b/mobsf/MobSF/utils.py
@@ -622,7 +622,7 @@ def strict_package_check(user_input):
 
     For android package and ios bundle id
     """
-    pat = re.compile(r'^([\w]*\.)+[\w]{2,155}$')
+    pat = re.compile(r'^([\w]*\.)+[\w-]{2,155}$')
     resp = re.match(pat, user_input)
     if not resp or '..' in user_input:
         logger.error('Invalid package name/bundle id/class name')