Hi,
thanks for this free tool.
I just had a special case in which I specifically had to copy the value of the requests referer header. Let's assume it was https://google.com/search.
Because of this code, the value will only span from the first double dot to the second double dot.
So instead of Referer: https://google.com/search, it sends Referer: https. I could bypass it for myself with //google.com/search, which did let my requests pass then.
Possible fixes: put together all the pieces after piece 0 (header name) again, possibly use a regex to separate the first part in front of the double dot from the rest, limit the amount of splits initially (https://golang.org/pkg/strings/#SplitN).
Hi,
thanks for this free tool.
I just had a special case in which I specifically had to copy the value of the requests referer header. Let's assume it was
https://google.com/search.Because of this code, the value will only span from the first double dot to the second double dot.
So instead of
Referer: https://google.com/search, it sendsReferer: https. I could bypass it for myself with//google.com/search, which did let my requests pass then.Possible fixes: put together all the pieces after piece 0 (header name) again, possibly use a regex to separate the first part in front of the double dot from the rest, limit the amount of splits initially (https://golang.org/pkg/strings/#SplitN).