Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update csp.go #270

Closed
wants to merge 1 commit into from
Closed

Conversation

jaikishantulswani
Copy link

@jaikishantulswani jaikishantulswani commented Jul 20, 2024

Fetching domains from Content-Security-Portal header and also strip *. from results.

Added `Content-Security-Portal` header too for fetching domains and also strip `*.` from results.
@auto-assign auto-assign bot requested a review from edoardottt July 20, 2024 09:10
@edoardottt
Copy link
Owner

Hi @jaikishantulswani ! Thanks for your contribution.
I cannot find a reference for Content-Security-Portal. Can you explain a lil bit what's that?

@jaikishantulswani
Copy link
Author

Hi @jaikishantulswani ! Thanks for your contribution. I cannot find a reference for Content-Security-Portal. Can you explain a lil bit what's that?

Hi @edoardottt thanks for your response on this. While testing some private bug bounty programs I have found this header in the response that contains the other domains associated with the program, thats why I added this.

@edoardottt
Copy link
Owner

I cannot find any reference online for this header. I suspect this is a custom header used only in that program.

@edoardottt edoardottt self-assigned this Jul 30, 2024
@kleozzy
Copy link

kleozzy commented Aug 25, 2024

It doesnt hurt to have this anyway , if its there fetch it.

@edoardottt edoardottt closed this Aug 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants