Nmap Development mailing list archives

[NSE][RFC] Updating default HTTP forwarding rules


From: nnposter <nnposter () users sourceforge net>
Date: Wed, 5 Apr 2017 17:55:19 -0600

Background:
Submitted HTTP GET and HEAD requests can automatically follow redirects.
The behavior is controlled via option "redirect_ok", which can either
enable or disable the default behavior (or it can provide custom
function). The default behavior is implemented as a set of rules
documented at https://nmap.org/nsedoc/lib/http.html#redirect_ok

Proposal:
I have identified several possible improvements of the current
implementation and proposed a set of corresponding patches:

https://github.com/nmap/nmap/issues/826
https://github.com/nmap/nmap/issues/829
https://github.com/nmap/nmap/issues/830

The patches *would* alter the forwarding behavior in some cases so I
would like to solicit feedback on whether the changes are reasonable
and/or gather any concerns or suggestions for tweaking the modifications.

Cheer,
nnposter
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/


Current thread: