Downloading YARA rules from a family page will lead to escaped content
danielplohmann opened this issue · comments
Daniel Plohmann commented
Describe the bug
When using the download button on a family page, the delivered YARA rule may contain HTML-escaped symbols, breaking the rule. Example are filesize comparisons in the condition (e.g. filesize < 123456
), which will then include <
instead of the actual operator.