passbe/beef-migration-test-2 — Issue #85: beef.net.requester.send must use beef.net.request not beef.net.proxyrequest
Author: passbe
Created: 2011-12-05 08:25:41+00:00
State: open

The proxyrequest function was added to deal with proxy requests were things like crossdomain requests must be skipped because they would fail anyway.

As the proxy extension is relying on the requester extension to actually send requests, the beef.net.requester.send was changed in order to use beef.net.proxyrequest.

This must be decoupled, otherwise when sending cross-domain requests using the requester, they will automatically blocked.
Sometimes the user could need such functionality, like for example when blindly exploiting verb tampering bugs (when cross-domain HEAD requests should be used, for example).

Original link: http://code.google.com/p/beef/issues/detail?id=510