intruxxer / zaproxy

Automatically exported from code.google.com/p/zaproxy
0 stars 0 forks source link

Header always updated on Send - cannot Resend some requests #560

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Do an Active Scan
2. One of the requests has an invalid Content-Length header
3. Right-Click -> Resend
4. Click "Send"

What is the expected output? What do you see instead?

* You see the request with the invalid C-L header in the Resend dialog (see 
below)
* C-L is changed and sent as 0 instead of with the invalid value in the UI
* Need a way to NOT update C-L (normally handy, but need a way to disable this 
feature)

What version of the product are you using? On what operating system?

2.0.0 on OSX

Please provide any additional information below.

This is the request in question (from Active Scan):
GET http://site-5.example.tld/ HTTP/1.1
Host: site-5.example.tld
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0;)
Pragma: no-cache
Cache-control: no-cache
Content-Type: application/x-www-form-urlencoded
Content-length: |!<>=~=>=<=*(),+-"'/&;

Original issue reported on code.google.com by brecta...@qualys.com on 14 Mar 2013 at 3:25

GoogleCodeExporter commented 9 years ago
Yes, we should provide an option to disable the content length updating.

Original comment by psii...@gmail.com on 14 Mar 2013 at 8:24

GoogleCodeExporter commented 9 years ago
Someone else has pointed out that we also always encode the URL.
Ideally we should provide an override for that too, although that might be more 
tricky as we're using a standard library.
I've tweaked the summary to cover this case too.

Original comment by psii...@gmail.com on 14 Mar 2013 at 8:29