Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixes issues with escaping characters in CEF parsing #10

Open
wants to merge 9 commits into
base: master
Choose a base branch
from

Conversation

hanvyj
Copy link
Contributor

@hanvyj hanvyj commented Sep 25, 2020

Addresses issue
#9

@solzimer
Copy link
Owner

Hi @hanvyj , I'm reviewing the changes so I can merge the pull request.
Thanks for your contribution!

@hanvyj
Copy link
Contributor Author

hanvyj commented Sep 28, 2020

Hope it's okay. I tried to use similar escaping logic for fields as was in the header parsing.

I was using this as a source for changing the test data (looked like it was originally from a similar source):

https://kc.mcafee.com/resources/sites/MCAFEE/content/live/CORP_KNOWLEDGEBASE/78000/KB78712/en_US/CEF_White_Paper_20100722.pdf

Edit: Hmm, did a commit to publish a fork, wasn't expecting it to get pulled into the PR

Renamed peek shiftItem, and added an actual peak (which doesn't mutate the array).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants