ping =)

On Mon, 2010-11-22 at 17:58 +0300, Taras wrote:
> Hi, Andres!
> 
> Do you remeber why we remove Content-Length from headers in 
> createFuzzableRequestRaw for 
> POST requests:
> core/data/request/frFactory.py
> ...
> def createFuzzableRequestRaw(method, url, postData, headers):
>     if not postData:
>         qsr = httpQsRequest.httpQsRequest()
>         qsr.setURL(url)
>         qsr.setMethod(method)
>         qsr.setHeaders(headers)
>         dc = urlParser.getQueryString(url)
>         qsr.setDc(dc)
>         return qsr
>     pdr = httpPostDataRequest.httpPostDataRequest()
>     pdr.setURL(url)
>     pdr.setMethod(method)
>     for header_name in headers.keys():
>         if header_name.lower() == 'content-length':
>             del headers[header_name]
>             ^^^       
>     pdr.setHeaders(headers)
> ...
> 
> It is really bad because some web servers ignore POST requests without this 
> header.
> 

-- 
Taras
http://oxdef.info
----
"Software is like sex: it's better when it's free." - Linus Torvalds



------------------------------------------------------------------------------
Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!
Tap into the largest installed PC base & get more eyes on your game by
optimizing for Intel(R) Graphics Technology. Get started today with the
Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.
http://p.sf.net/sfu/intelisp-dev2dev
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop

Reply via email to