Added warning if a header listed in SignedHeaders is missing from request

Author: streiwil

src/main/java/burp/Utility.java

@@ -90,8 +90,12 @@ public static byte[] signRequest(IHttpRequestResponse messageInfo,
 
         StringBuilder canonicalHeaders = new StringBuilder();
 
-        for (String signedHeader : signedHeaderList){
-            canonicalHeaders.append(signedHeader.toLowerCase()).append(':').append(headerMap.get(signedHeader)).append('\n');
+        for (String signedHeader : signedHeaderList) {
+            if (headerMap.containsKey(signedHeader)) {
+                canonicalHeaders.append(signedHeader.toLowerCase()).append(':').append(headerMap.get(signedHeader)).append('\n');
+            } else {
+                pw.println("Warning: SignedHeader '" + signedHeader + "' does not exist in request headers.");
+            }
         }
 
         byte[] request = messageInfo.getRequest();