Skip to content

Commit 1aee0f3

Browse files
author
Tod Beardsley
committed
Warn if it's not UPPERCASE method (@wchen-r7)
See the discussion on f7bfab5, PR rapid7#3386
1 parent 9f78bec commit 1aee0f3

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

modules/auxiliary/scanner/http/http_traversal.rb

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -331,6 +331,10 @@ def load_filelist
331331
end
332332

333333
def run_host(ip)
334+
# Warn if it's not a well-formed UPPERCASE method
335+
if datastore['METHOD'] !~ /^[A-Z]+$/
336+
print_warning("HTTP method #{datastore['METHOD']} is not Apache-compliant. Try only UPPERCASE letters.")
337+
end
334338
print_status("Running action: #{action.name}...")
335339

336340
# And it's..... "SHOW TIME!!"

0 commit comments

Comments
 (0)