Open xjohjrdy opened 2 months ago
Hi
Unfortunately, I can't seem to find your email in our system.
Thanks to your detailed replication steps, I've replicated this issue and will look into this further.
We'll get back to you with some further feedback shortly.
Hi
Thank you for your patience. This issue seems to have been introduced with the Montoya API. For this example, it may be best to combine these extensions into one so that the appropriate requests are dropped.
For an unaffected version, you would need to go back to v2022.8.5, prior to the Montoya API's introduction.
We'll get a bug report raised for this behavior.
If there's anything else we can help with, then please let us know.
I have two legacy extensions written in Python named
extension-a.py
andextension-b.py
.The difference between these two extensions lies in their extension names and URL matching rules.
Here is the source code for the two extensions:
Since the release of the Montoya API, these two extensions cannot work properly at the same time.
Each extension works fine when used alone. However, when both extensions are loaded simultaneously, one of them does not function properly.
Here is my test command and some output text:
I sent the above information to support#portswigger.net via email, but I did not receive a response.
So, I tried debugging the burpsuite to find the cause of the issue, and I believe I have identified the root cause.
As shown in the code snippet below, burpsuite calls each plugin, but the return value is overwritten by the last plugin.