Skip to content

[pull] master from sherlock-project:master#136

Merged
pull[bot] merged 11 commits intolinux-doc:masterfrom
sherlock-project:master
May 5, 2026
Merged

[pull] master from sherlock-project:master#136
pull[bot] merged 11 commits intolinux-doc:masterfrom
sherlock-project:master

Conversation

@pull
Copy link
Copy Markdown

@pull pull Bot commented May 5, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

salmanrajz and others added 11 commits March 31, 2026 19:57
Fixes #2730. Usernames containing non-ASCII characters (e.g. 'Émile')
can trigger a UnicodeDecodeError inside the requests library during
redirect handling. This exception is not a subclass of
requests.exceptions.RequestException, so it escaped all existing
except blocks in get_response() and crashed the program.

Added a catch for UnicodeError (parent of both UnicodeDecodeError and
UnicodeEncodeError) so these sites are gracefully skipped instead of
crashing the entire scan.

Added regression tests in tests/test_unicode.py.
Pornhub was added to the remote false_positive_exclusions.txt, causing
test_remove_nsfw and test_nsfw_explicit_selection to fail since the
site gets filtered out before the test runs. Replaced with Xvideos and
Erome which are NSFW-flagged but not excluded.
Made-with: Cursor
…tories

- ArtStation: Add urlProbe using the JSON API endpoint
  (https://www.artstation.com/users/{}.json) which returns proper
  404 for non-existing users, instead of the main page which
  returns 200 for both existing and non-existing profiles.
  Closes #2714

- GeeksforGeeks: Switch from status_code to message detection.
  Both existing and non-existing profiles return HTTP 200, but
  non-existing profiles have "false" in the page title.
  Closes #2782

- LushStories: Switch from status_code to response_url detection.
  Non-existing profiles redirect (302) to /login while existing
  profiles return 200. Closes #2371
- Carrd: Simple website builder with profiles at {username}.carrd.co.
  Uses status_code detection (404 for non-existing profiles).

- SpaceHey: Retro social network inspired by MySpace.
  Uses message detection ("Not Found (Error 404) | SpaceHey" title
  for non-existing profiles).

- Substack: Newsletter/publishing platform with profiles at
  {username}.substack.com. Uses status_code detection (404 for
  non-existing publications).
feat: add Carrd, SpaceHey, and Substack as supported sites
…cial-chars

fix: handle UnicodeDecodeError on usernames with special characters
fix: resolve false positives for ArtStation, GeeksforGeeks, and LushStories
…e-positive

Fix Cracked Forum false positives
@pull pull Bot locked and limited conversation to collaborators May 5, 2026
@pull pull Bot added the ⤵️ pull label May 5, 2026
@pull pull Bot merged commit 4e2a4f6 into linux-doc:master May 5, 2026
19 of 21 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants