Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
Escape domain detection has a leak #339
When crawljax asserts if it has left the domain it checks if the host of its current url is in the new url.
This is done here in Crawljax.java
However, when it visits a social platform like Google+, that new URL has the domain int it as well, as a parameter.
Crawljax should check that the hostname occurs in the host part of the current URL.