[NSE][RFC] Updating default HTTP forwarding rules
nnposter <[email protected]>
| Newsgroups | gmane.comp.security.nmap.devel |
|---|---|
| Message-ID | <[email protected]> |
Background: Submitted HTTP GET and HEAD requests can automatically follow redirects. The behavior is controlled via option "redirect_ok", which can either enable or disable the default behavior (or it can provide custom function). The default behavior is implemented as a set of rules documented at https://nmap.org/nsedoc/lib/http.html#redirect_ok Proposal: I have identified several possible improvements of the current implementation and proposed a set of corresponding patches: https://github.com/nmap/nmap/issues/826 https://github.com/nmap/nmap/issues/829 https://github.com/nmap/nmap/issues/830 The patches *would* alter the forwarding behavior in some cases so I would like to solicit feedback on whether the changes are reasonable and/or gather any concerns or suggestions for tweaking the modifications. Cheer, nnposter _______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/