search

PortSwigger / burp-extensions-montoya-api

Burp Extensions Api
Other
140 stars 5 forks source link

Add support for determining whether common cookie attributes are set #50

Closed nchigmaroff closed 1 year ago

nchigmaroff commented 1 year ago

Hi all,

Thanks for the great work developing Montoya.

As far as I know right now, Montoya's Cookie interface allows the domain, path, expiration, name, and value of a HTTP cookie to be accessed easily. However, there is no support for checking common cookie attributes like HttpOnly, secure, etc.

It would be great to have a few additional methods along the lines of httpCookie.isSecure() or httpCookie.isHttpOnly() that return Booleans to make it easy to check security properties of set cookies within extensions.

Thank you!

Hannah-PortSwigger commented 1 year ago

Thanks for the feedback! We've raised a feature request for this functionality. We'll continue to monitor the popularity of this request.