mirror of
https://github.com/laramies/theHarvester.git
synced 2026-09-23 01:54:56 +02:00
- _create_connector: an explicit ssl=False (verification disabled) was silently replaced with a verifying context by 'ssl_context or default'; only an unset context now falls back to the certifi default - fetch/post_fetch/fetch_all: caller-supplied headers were silently dropped when a caller-owned session was passed; they are now forwarded per request, matching _open_get_response and aiohttp merge semantics (sessions that bake the same headers are unaffected) - fetch: a borrowed session with default verification no longer rebuilds a certifi SSL context on every request; it defers to the connector context the session already owns - _normalize_data: the post_fetch data='' default raised JSONDecodeError internally and silently returned without sending any request; empty bodies now send, and non-JSON strings pass through as raw bodies Traced every owned-versus-borrowed branch; all post_fetch callers pass json_body or valid JSON strings, and the only verify=False caller (api_endpoints) supplies its own connector.