mirror of
https://github.com/rapid7/metasploit-framework
synced 2024-11-05 14:57:30 +01:00
Added a check for Set-Cookie header in msftidy
This commit is contained in:
parent
506c354722
commit
551327bec6
@ -465,6 +465,11 @@ class Msftidy
|
||||
if ln =~ /(?<!\.)datastore\[["'][^"']+["']\]\s*=(?![=~>])/
|
||||
error("datastore is modified in code: #{ln}", idx)
|
||||
end
|
||||
|
||||
# do not read Set-Cookie header
|
||||
if ln =~ /\[['"]Set-Cookie['"]\]/
|
||||
warn("Do not read Set-Cookie header directly, use res.get_cookies instead: #{ln}", idx)
|
||||
end
|
||||
}
|
||||
end
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user