mirror of
https://github.com/laramies/theHarvester.git
synced 2026-09-28 04:24:55 +02:00
Refactor and standardize output handling with new utilities in theHarvester.lib.output, add tests for print_linkedin_sections and sorted_unique. Fix regex inaccuracies and enhance CORS validation.
This commit is contained in:
@@ -36,7 +36,7 @@ class TestCORSConfiguration:
|
||||
allow_origins = options.get('allow_origins', [])
|
||||
allow_credentials = options.get('allow_credentials', False)
|
||||
|
||||
if '*' in allow_origins:
|
||||
if isinstance(allow_origins, (list, tuple, set)) and '*' in allow_origins:
|
||||
assert (
|
||||
allow_credentials is False
|
||||
), 'CRITICAL: CORS must not allow credentials with wildcard origins (CVE risk)'
|
||||
|
||||
Reference in New Issue
Block a user