Skip to content

Add referer dependent response check (#149)#220

Open
jthack wants to merge 2 commits intomainfrom
issue-149-referer-dependent-response
Open

Add referer dependent response check (#149)#220
jthack wants to merge 2 commits intomainfrom
issue-149-referer-dependent-response

Conversation

@jthack
Copy link
Copy Markdown
Contributor

@jthack jthack commented Oct 23, 2025

Summary

  • probe same-origin vs external Referer headers and compare responses
  • raise medium finding when status or body length diverges beyond threshold
  • register check in backend registry and expose toggle in Balanced active preset

Testing

  • pnpm lint
  • pnpm typecheck
  • pnpm test -- --match 'Referer dependent'

Closes #149

@jthack jthack requested a review from a team as a code owner October 23, 2025 13:26
@jthack
Expand referer-dependent-response test coverage (4→10 tests)
7fdcaf9 
Add comprehensive test coverage for Referer-dependent response detection:
- Detection: status differences, body length >100 bytes, combined differences, 101-byte threshold
- False Positives: identical responses, small differences, 100-byte threshold
- Edge Cases: empty baseline body, security guidance validation
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Referer-dependent response

1 participant

@jthack