SummerSec/ShiroAttack2

复杂请求bug

Opened this issue · 0 comments

POST /login HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.28.3 (KHTML, like Gecko) Version/3.2.3 ChromePlus/4.0.222.3 Chrome/4.0.222.3 Safari/525.28.3
Accept: text/html
Accept-Encoding: gzip, deflate, br
Accept-Language: zh-CN,zh;q=0.9
Connection: close
Cookie: rememberMe=yes
Content-Type: application/json
Host: test.com
Content-Length: 186

{"body":""}

在工具中设置 Content-Type: application/json 后发出的请求如上,出现两个Content-Type,且json格式的设置不生效;