Simon Whitaker
Simon Whitaker
Hi! Thanks for reporting this. Sorry I took me so long to reply, I didn't spot it when you originally posted. @kodybrown has kindly done most of the Windows-specific work...
I think this is intended behaviour. See https://stackoverflow.com/questions/940905/can-i-read-the-hash-portion-of-the-url-on-my-server-side-application-php-ruby
> Seems like a legit concern. We'll happily accept PRs for this issue @zricethezav You can find a proposed fix here: https://github.com/trufflesecurity/trufflehog/pull/2510