0140454/hackbar

POST submission data error

chixiaome opened this issue · 3 comments

During the wide byte injection process, submitting% df in the POST parameter will cause an error. Please tell me how to solve this problem.It will prompt me URI malformed.
image

Thanks for your report.

Since HackBar uses decodeURIComponent when rebuilding form to be sent, it will throw an error when you use wide byte.

Possible solution is using the processing logic of application/json enctype.

  1. Split A=%df'&B=Hello into two part A=%df'&B and Hello.
  2. Construct a text/plain form with a input whose name is A=... and value is He....
  3. After submitting this form, overwrite content-type header with application/x-www-form-urlencoded in background page.

I may publish a new version in the next few days. If you cannot wait the release, you can modify code according to the above description.

Need another solution

New enctype for raw data is added in commit f014bae.