Taras,

    Could you please review this bug? Basically I think that you
should change the None for a '' (empty string) and that would do the
trick; but I would like you to do it because you're the original
author of that code.

    Also, a related question... why is the urlParameter a webSpider
config option, and not a global HTTP-Option?


---------- Forwarded message ----------
From: olle <o...@nxs.se>
Date: Thu, Feb 5, 2009 at 11:22 AM
Subject: Re: w3af
To: Andres Riancho <andres.rian...@gmail.com>


On Thu, Jan 29, 2009 at 10:15:30AM -0200, Andres Riancho wrote:
>
> Please let me know how w3af performs on those sites, and if you find
> any bugs; report them as usual =)

Playing with http://demo.testfire.net/ which seems to be a very nice test site.

However I found a nasty bug with the webSpider when using saved configs.
If the config contains:

[discovery.webSpider]
urlParameter = None

The webSpider will break when using that config. It will try to append ";None="
to every request and give up with an error "Too many retries".

I am guessing the "None" in the config gets interpreted as a literal string
and not the special value "None" you were expecting when reading the config.

/olle



-- 
Andres Riancho
http://w3af.sourceforge.net/
Web Application Attack and Audit Framework

------------------------------------------------------------------------------
Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM)
software. With Adobe AIR, Ajax developers can use existing skills and code to
build responsive, highly engaging applications that combine the power of local
resources and data with the reach of the web. Download the Adobe AIR SDK and
Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop

Reply via email to