Git
/
testssl.sh
mirror of https://github.com/drwetter/testssl.sh.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

- FIX #213, wording

This commit is contained in:
Dirk 2015-10-13 22:25:01 +02:00
parent d4dbf1138c
commit 78fab8addb
1 changed files with 11 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
testssl.sh
View File

@ -3363,6 +3363,8 @@ run_breach() {
local -i was_killed=0 local -i was_killed=0
local referer useragent local referer useragent
local url local url
local spaces=" "
local disclaimer=""
[[ $SERVICE != "HTTP" ]] && return 7 [[ $SERVICE != "HTTP" ]] && return 7
@ -3371,6 +3373,8 @@ run_breach() {
url="$1" url="$1"
[[ -z "$url" ]] && url="/" [[ -z "$url" ]] && url="/"
disclaimer=" - only supplied \"$url\" tested"
referer="https://google.com/" referer="https://google.com/"
useragent="$UA_STD" useragent="$UA_STD"
if $SNEAKY; then if $SNEAKY; then
@ -3392,14 +3396,16 @@ run_breach() {
pr_litemagenta ") " pr_litemagenta ") "
ret=3 ret=3
elif [[ -z $result ]]; then elif [[ -z $result ]]; then
pr_green "no HTTP compression (OK) " pr_green "no HTTP compression (OK) "
ret=0 outln "$disclaimer"
ret=0
else else
pr_litered "NOT ok: uses $result HTTP compression " pr_litered "potentially NOT ok, uses $result HTTP compression."
outln "$disclaimer"
outln "$spaces Can be ignored for static pages or if no secrets in the page"
ret=1 ret=1
fi fi
# Any URL can be vulnerable. I am testing now only the given URL! # Any URL can be vulnerable. I am testing now only the given URL!
outln " - only supplied \"$url\" tested"
tmpfile_handle $FUNCNAME.txt tmpfile_handle $FUNCNAME.txt
return $ret return $ret
@ -5199,4 +5205,4 @@ fi
exit $? exit $?
# $Id: testssl.sh,v 1.407 2015/10/13 06:31:53 dirkw Exp $ # $Id: testssl.sh,v 1.408 2015/10/13 20:25:00 dirkw Exp $