Don't alert if content-type matches 'text/' #728

sullo · Jul 4, 2021 · bf9044c · bf9044c
1 parent 21e761b
commit bf9044c
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/program/plugins/nikto_sitefiles.plugin b/program/plugins/nikto_sitefiles.plugin
@@ -85,9 +85,8 @@ sub nikto_sitefiles {
               nfetch($mark, "/$f", "GET", "", "", \%flags, "sitefiles");
 
             if (($response->{'content-type'} =~ '/^application\//i')
-                || (   ($res == 200)
-                    && ($response->{'content-length'} > 0)
-                    && (!is_404("/$f", $content, $res, $response->{'location'})))
+                || (($res == 200) && ($response->{'content-length'} > 0) && ($response->{'content-type'} !~ '/^text\//i') &&
+                (!is_404("/$f", $content, $res, $response->{'location'})))
                     ) {
 
                 # alert