Scanning services behind a reverse-proxy with subpath not working

[monsdar]

What information was incorrect, unhelpful, or incomplete?

I'd like to scan web-services I selfhost in my LAN environment. The services run behind a traefik reverse proxy under a subpath. So the URLs to these services are like the following:

• https://my.domain.com/home
• https://my.domain.com/grafana
• https://my.domain.com/my_custom_service

I do not have something running behind https://my.domain.com, so when running the scanner I get the following response:

# mdn-http-observatory-scan my.domain.com
{"error":"Site did respond with an unexpected HTTP status code 404."}

Running with one of the subpath urls looks like this:

# mdn-http-observatory-scan https://my.domain.com/my_custom_service
{"error":"The site seems to be down."}

...or...

# mdn-http-observatory-scan my.domain.com/my_custom_service
{"error":"Site did respond with an unexpected HTTP status code 404."}

What did you expect to see?

I'd like to run the scanner with a specific URL, like so:

• mdn-http-observatory-scan https://my.domain.com/my_custom_service

It then should scan that URL for any issues.

Do you have any supporting links, references, or citations?

No response

Do you have anything more you want to share?

I'm setting up a local environment using the following commands:

• docker run -it node:alpine /bin/sh
• npm install --global @mdn/mdn-http-observatory

[github-actions[bot]]

It looks like this is your first issue. Welcome! 👋 One of the project maintainers will be with you as soon as possible. We appreciate your patience. To safeguard the health of the project, please take a moment to read our code of conduct.