From 7031ef8e00d5039ed32e217e5aacf1abcb2fa5b4 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Wed, 4 Apr 2012 10:34:27 +0000 Subject: [PATCH] removing default values for referer and host from higher level/risk options --- lib/core/common.py | 12 ------------ 1 file changed, 12 deletions(-) diff --git a/lib/core/common.py b/lib/core/common.py index a891a5e2f..fc0ad27fb 100644 --- a/lib/core/common.py +++ b/lib/core/common.py @@ -1107,18 +1107,6 @@ def parseTargetUrl(): conf.url = "%s://%s:%d%s" % (conf.scheme, conf.hostname, conf.port, conf.path) conf.url = conf.url.replace(URI_QUESTION_MARKER, '?') - if not conf.referer and (conf.level >= 3 or intersect(REFERER_ALIASES, conf.testParameter, True)): - debugMsg = "setting the HTTP Referer header to the target url" - logger.debug(debugMsg) - conf.httpHeaders = filter(lambda (key, value): key != HTTPHEADER.REFERER, conf.httpHeaders) - conf.httpHeaders.append((HTTPHEADER.REFERER, conf.url)) - - if not conf.host and (conf.level >= 5 or intersect(HOST_ALIASES, conf.testParameter, True)): - debugMsg = "setting the HTTP Host header to the target url" - logger.debug(debugMsg) - conf.httpHeaders = filter(lambda (key, value): key != HTTPHEADER.HOST, conf.httpHeaders) - conf.httpHeaders.append((HTTPHEADER.HOST, getHostHeader(conf.url))) - def expandAsteriskForColumns(expression): """ If the user provided an asterisk rather than the column(s)