Add -ais flag for all-input-scope functionality#1433
Add -ais flag for all-input-scope functionality#1433Vinayakp2001 wants to merge 2 commits intoprojectdiscovery:devfrom
Conversation
Introduces -ais/--all-input-scope flag that treats all input targets as explicit scope roots for the entire crawling session. Features: - Supports CLI, file, and stdin input methods - Prevents conflicts with -fs flag (validation error) - Takes precedence over -ns flag when both specified - Compatible with existing -cs/-cos regex filters - Maintains backward compatibility Fixes projectdiscovery#1383
WalkthroughTwo new command-line flags are introduced: Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~3 minutes Poem
🚥 Pre-merge checks | ✅ 2 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (2 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing touches
📜 Recent review detailsConfiguration used: Organization UI Review profile: CHILL Plan: Pro 📒 Files selected for processing (3)
🚧 Files skipped from review as they are similar to previous changes (2)
🔇 Additional comments (2)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Actionable comments posted: 0
🧹 Nitpick comments (1)
internal/runner/options.go (1)
28-38: Document rationale for restricting-aisto the default-fs="rdn"
No existing comments or documentation explain why-aiscannot be combined with custom field‐scopes. If intentional, add a brief explanation ininternal/runner/options.goand the README.
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
📒 Files selected for processing (3)
cmd/katana/main.go(1 hunks)internal/runner/options.go(1 hunks)pkg/types/options.go(2 hunks)
🔇 Additional comments (4)
pkg/types/options.go (2)
35-36: LGTM!The
AllInputScopefield addition is clear and aligns with the PR objectives for implementing the-aisflag functionality.
151-152: Verify if JavaScriptInteractions belongs in this PR.The
JavaScriptInteractionsfield is not mentioned in the PR summary (title: "Add -ais flag for all-input-scope functionality"). This suggests it may be unrelated scope creep or part of a different feature.Please confirm whether this field should be included in PR #1433 or if it belongs to a separate change.
cmd/katana/main.go (2)
195-195: LGTM!The
-ais/--all-input-scopeflag is correctly:
- Placed in the Scope group
- Mapped to
options.AllInputScope- Documented with a clear description matching the PR objectives
187-187: Verify if js-interactions flag belongs in this PR.Similar to the field addition in
pkg/types/options.go, the--js-interactionsflag is not mentioned in PR #1433's summary. This appears to be unrelated to the-aisflag functionality.Please confirm whether this flag should be included in this PR or moved to a separate pull request focused on JavaScript interaction functionality.
Mzack9999
left a comment
There was a problem hiding this comment.
The implementation seems to disable only the no-scope flag, but not adding or building the regex containing the in-scope domains
| // XhrExtraction extract xhr requests | ||
| XhrExtraction bool | ||
| // JavaScriptInteractions enables clicking JavaScript-enabled elements to discover hidden URLs | ||
| JavaScriptInteractions bool |
|
Closing as implementation is incomplete |
Introduces -ais/--all-input-scope flag that treats all input targets as explicit scope roots for the entire crawling session.
Features:
Fixes #1383
Summary by CodeRabbit
--js-interactions (-jsi)flag to enable clicking JavaScript-enabled elements for discovering hidden URLs.--all-input-scope (-ais)flag to treat all input targets as explicit scope roots during crawling sessions.✏️ Tip: You can customize this high-level summary in your review settings.