mirror of
https://github.com/drwetter/testssl.sh.git
synced 2025-01-06 00:39:44 +01:00
- fix: relative redirect led to fp (https)
This commit is contained in:
parent
c70a13d014
commit
20cee1e788
@ -720,7 +720,7 @@ run_http_header() {
|
|||||||
301|302|307|308)
|
301|302|307|308)
|
||||||
redirect=$(grep -a '^Location' $HEADERFILE | sed 's/Location: //' | tr -d '\r\n')
|
redirect=$(grep -a '^Location' $HEADERFILE | sed 's/Location: //' | tr -d '\r\n')
|
||||||
out ", redirecting to \"$redirect\""
|
out ", redirecting to \"$redirect\""
|
||||||
if [[ $redirect != "https://"* ]]; then
|
if [[ $redirect == "http://"* ]]; then
|
||||||
pr_litered " -- Redirect to insecure URL (NOT ok)"
|
pr_litered " -- Redirect to insecure URL (NOT ok)"
|
||||||
fileout "status_code" "NOT OK" \, "Redirect to insecure URL (NOT ok). Url: \"$redirect\""
|
fileout "status_code" "NOT OK" \, "Redirect to insecure URL (NOT ok). Url: \"$redirect\""
|
||||||
fi
|
fi
|
||||||
@ -6780,4 +6780,4 @@ fi
|
|||||||
exit $?
|
exit $?
|
||||||
|
|
||||||
|
|
||||||
# $Id: testssl.sh,v 1.466 2016/02/20 20:46:16 dirkw Exp $
|
# $Id: testssl.sh,v 1.467 2016/02/22 09:44:42 dirkw Exp $
|
||||||
|
Loading…
Reference in New Issue
Block a user