From e9291932e515edaec6880fe9797c3edf0c93f585 Mon Sep 17 00:00:00 2001 From: Bernardo Damele Date: Mon, 29 Nov 2010 16:33:20 +0000 Subject: [PATCH] Apply --level also to User-Agent (level >= 4) and Cookie (level >= 3). GET and POST parameters are always tested. --- lib/controller/controller.py | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/lib/controller/controller.py b/lib/controller/controller.py index b0abb460d..18f46deb6 100644 --- a/lib/controller/controller.py +++ b/lib/controller/controller.py @@ -311,6 +311,14 @@ def start(): parameters.insert(0, place) for place in parameters: + # Test User-Agent header only if --level >= 4 + condition = (place == "User-Agent" and conf.level < 4) + # Test Cookie header only if --level >= 3 + condition |= (place == "Cookie" and conf.level < 3) + + if condition: + continue + if not conf.paramDict.has_key(place): continue