Skip to content

Process additional data contained in resolved methods #17

@cerrussell

Description

@cerrussell

We can sometimes get media types, responses, headers, body, etc. within resolved methods.

Examples

Java

"@RequestMapping(value = \"/vuln/emptyReferer\", produces = \"application/javascript\")"

"@RequestMapping(method = RequestMethod.POST, value = \"/uaa/users\", consumes = MediaType.APPLICATION_JSON_UTF8_VALUE)"

Javascript/Typescript

"app.use(functionjsonParser(req:Request,res:Response,next:NextFunction){\r//@ts-expect-errorFIXMEintentionallysavingoriginalrequestinthisproperty\rreq.rawBody=req.body\rif(req.headers['content-type']?.includes('application/json')){\rif(!req.body){\rreq.body={}\r}\rif(req.body!==Object(req.body)){//Expensiveworkaroundfor500errorsduringFrisbytestrun(see#640)\rreq.body=JSON.parse(req.body)\r}\r}\rnext()\r})",

Metadata

Metadata

Assignees

Labels

enhancementEnhance an existing feature

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions