more php source matching (#626)

CERT-Polska · Nov 7, 2023 · 76cb1ba · 76cb1ba
1 parent a81dcef
commit 76cb1ba
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/artemis/reporting/modules/bruter/classifier.py b/artemis/reporting/modules/bruter/classifier.py
@@ -144,7 +144,7 @@ def is_php_source(found_url: FoundURL) -> bool:
     if ".php" not in path and ".inc" not in path and not path.endswith("/"):
         return False
 
-    if "<?php" in found_url.content_prefix:
+    if "<?php" in found_url.content_prefix or re.match(r"<\?(\s|$)", found_url.content_prefix):
         return True
 
     return False