malpedia / feedback

Public Issue tracker to gather feedback for and allow discussions around Malpedia

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Downloading YARA rules from a family page will lead to escaped content

danielplohmann opened this issue · comments

Describe the bug
When using the download button on a family page, the delivered YARA rule may contain HTML-escaped symbols, breaking the rule. Example are filesize comparisons in the condition (e.g. filesize < 123456), which will then include &lt; instead of the actual operator.