From 89ed918bc0b039c10d1f76b393d0dbc12ad56edd Mon Sep 17 00:00:00 2001
From: jvoisin <jvoisin@users.noreply.github.com>
Date: Sat, 10 Mar 2018 05:03:41 +0100
Subject: [PATCH] Tighten a bit the ExpressionEngine regexp (#2102)

This can be tested [here](http://shamelessmag.com/blog/entry/adversary-making-a-statement-in-the-industrial-mu/)
---
 src/apps.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/apps.json b/src/apps.json
index a64350ee1..c151205b0 100644
--- a/src/apps.json
+++ b/src/apps.json
@@ -2911,7 +2911,7 @@
         1
       ],
       "headers": {
-        "Set-Cookie": "(?:exp_last_activity|exp_tracker)"
+        "Set-Cookie": "^exp_(?:last_activity|tracker|csrf_token)"
       },
       "icon": "ExpressionEngine.png",
       "implies": "PHP",