request/response editor in dialog, Burp will break

[ody5sey]

1. 源码 `package burp.api.montoya;

import burp.api.montoya.http.handler.*; import burp.api.montoya.ui.UserInterface; import burp.api.montoya.ui.editor.HttpRequestEditor; import burp.api.montoya.ui.editor.HttpResponseEditor;

import javax.swing.; import java.awt.;

public class RepeaterTest implements BurpExtension, HttpHandler { /**

• Invoked when the extension is loaded. Any registered handlers will only be enabled once this method has completed.

• @param api The API implementation to access the functionality of Burp Suite. */ public static MontoyaApi montoyaApi;

  @Override public void initialize(MontoyaApi api) {

  montoyaApi = api;
  montoyaApi.extension().setName("New Test Burp");
  montoyaApi.http().registerHttpHandler(this);

  }

  /**

• Invoked by Burp when an HTTP request is about to be sent.
• @param requestToBeSent information about the HTTP request that is going to be sent.

• @return An instance of {@link RequestToBeSentAction}. */ @Override public RequestToBeSentAction handleHttpRequestToBeSent(HttpRequestToBeSent requestToBeSent) { return null; }

  /**

• Invoked by Burp when an HTTP response has been received.
• @param responseReceived information about HTTP response that was received.

• @return An instance of {@link ResponseReceivedAction}. */ @Override public ResponseReceivedAction handleHttpResponseReceived(HttpResponseReceived responseReceived) { JDialog dialog = new JDialog(getBurpFrame(), "Visual");

  JSplitPane mjSplitPane = new JSplitPane(JSplitPane.VERTICAL_SPLIT);
  
  JSplitPane HjSplitPane = new JSplitPane();
  HjSplitPane.setResizeWeight(0.5);
  JTabbedPane Ltable = new JTabbedPane();
  
  UserInterface userInterface = montoyaApi.userInterface();
  
  HttpRequestEditor requestViewer = userInterface.createHttpRequestEditor();
  HttpResponseEditor responseViewer = userInterface.createHttpResponseEditor();
  
  Ltable.addTab("Request", requestViewer.uiComponent());
  JTabbedPane Rtable = new JTabbedPane();
  Rtable.addTab("Response", responseViewer.uiComponent());
  HjSplitPane.add(Ltable, "left");
  HjSplitPane.add(Rtable, "right");
  
  mjSplitPane.add(HjSplitPane);
  dialog.add(mjSplitPane);
  
  dialog.setSize(800, 600);
  dialog.setResizable(true);
  //dialog.setLocationRelativeTo(parentFrame);
  dialog.setDefaultCloseOperation(JDialog.DISPOSE_ON_CLOSE);
  
  dialog.setVisible(true);
  
  return null;

  }

  private Frame getBurpFrame() { for (Frame f : Frame.getFrames()) { if (f.isVisible() && f.getTitle().startsWith(("Burp Suite"))) { return f; } } return null; }

} `

2. compile jar and burp load
3. refresh browser 6-10 Burp will break, In old api You will not found this bug.

[Hannah-PortSwigger]

Hi

Could you provide some more details on how Burp is breaking?

When you say this doesn't happen with the old API, could you please provide some more information?

Additionally, you don't need to try and find the Burp frame in the same way any more - you can just use api.userInterface().swingUtils().suiteFrame()

[ody5sey]

In new api, browser will refresh, burp frame will not response, only kill from Windows OS taskmanager

[Hannah-PortSwigger]

Hi

Are you using Windows 10 or 11? I've tried replicating this on MacOS, but have not experienced any issues when using your provided code.

[ody5sey]

Win11

[Hannah-PortSwigger]

I've not been able to replicate this behavior on Windows 11.

Could you drop us an email at support@portsigger.net with a screen recording of the issue and the JAR file for your extension? I can also send you a copy of the JAR we've built so you can see if that continues to have the same issue.

I have found when using your extension that the frames created by your extension stay at the front of the screen and won't go behind other applications that have the focus.