Closed 0xdevalias closed 6 years ago
Fixed in upcoming release.
@wisec : Just hit this issue again running the latest version of BCDetect, will send an email with further context.
Edit: In this case, the culprit appeared to be in a Set-Cookie
header (and presumably in subsequent Cookie
headers as well:
Set-Cookie: ___utmvawFuLyBV=snl LsyY; path=/; Max-Age=900
There is a non-printing character between the snl
and LsyY
parts of the cookie value.
Running through the JS Console to % escape, I see the following, implying perhaps it is a %01
:
escape("Set-Cookie: ___utmvawFuLyBV=snlAAAA�BBBBBLsyY; path=/; Max-Age=900")
"Set-Cookie%3A%20___utmvawFuLyBV%3DsnlAAAA%01BBBBBLsyY%3B%20path%3D/%3B%20Max-Age%3D900"
While this likely breaks the HTTP standard, it would be good if it was possible to handle it without BCDetect crashing.
When I try to load a certain page, I get the following printed in the browser:
Looking in the console log, I see the following.
Assuming the headers it's referring to are the HTTP headers, they are as follows: