cms_scanner 0.13.7 → 0.13.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4e844a7c12e7e4767678eee8958f7b6c863789f4478553b9260e86dea258c974
-  data.tar.gz: e203a131365c6b7637842c6296918135e3dc97bb6bd8a922214c3629779e622e
+  metadata.gz: c30dcbc053e4087d1f308d8390d026a028ddb2ca7c8f5f01108e72beed649e76
+  data.tar.gz: fdd30f85d4a8847da231678c1a785002421f322d65623a9ad66168a007cba420
 SHA512:
-  metadata.gz: 4d1f9c65037c59a457dd2fb4370151b0cdc0639d5dcf01d84cfc2fba1b5956ab4761434ee0b85daff31aacf0fd1db0e61c74c34688678a23d72bee7108636ede
-  data.tar.gz: bb9e70348937efab985f82b5baca41e74fdbcfa7620b7fff1ef9f935f8562e8b0d3531bf0a0a2d73aaa1393305999d6bf3b8656f570b2c012d286784c44b40a3
+  metadata.gz: a63a0447cc9f8dcc69974e6b82e93db96d534006e5a5a35b5de56a2374d8a28750034b3490e6180e8d1706a01132eb90ca49e6dc8060c4c625b704a93a76e862
+  data.tar.gz: 9b5e1f8fa8cbee20c75b163814196cc08292fbff28a6feb6d5f52f58cf36ecd9bbbd161b8c38abf3476fb7a87e564fcdb5bbb554c0611d4ba0a146dc083cb3e2

data/app/controllers/core.rb

@@ -48,14 +48,28 @@ module CMSScanner
           raise Error::ProxyAuthRequired
         end
 
-        # Checks for redirects
-        # An out of scope redirect will raise an Error::HTTPRedirect
-        effective_url = target.homepage_res.effective_url
+        handle_redirection(res)
+      end
+
+      # Checks for redirects, an out of scope redirect will raise an Error::HTTPRedirect
+      #
+      # @param [ Typhoeus::Response ] res
+      def handle_redirection(res)
+        effective_url = target.homepage_res.effective_url # Basically get and follow location of target.url
+        effective_uri = Addressable::URI.parse(effective_url)
+
+        # Case of http://a.com => https://a.com (or the opposite)
+        if !NS::ParsedCli.ignore_main_redirect && target.uri.domain == effective_uri.domain &&
+           target.uri.path == effective_uri.path && target.uri.scheme != effective_uri.scheme
+
+          target.url = effective_url
+        end
 
         return if target.in_scope?(effective_url)
 
         raise Error::HTTPRedirect, effective_url unless NS::ParsedCli.ignore_main_redirect
 
+        # Sets back homepage_res to unfollowed location in case of ignore_main_redirect used
         target.homepage_res = res
       end
 

data/lib/cms_scanner/version.rb

@@ -2,5 +2,5 @@
 
 # Version
 module CMSScanner
-  VERSION = '0.13.7'
+  VERSION = '0.13.8'
 end

data/lib/cms_scanner/web_site.rb

@@ -115,7 +115,7 @@ module CMSScanner
 
     # @return [ Hash ] The Typhoeus params to use to perform head requests
     def head_or_get_params
-      @head_or_get_params ||= if NS::Browser.head(homepage_url).code == 405
+      @head_or_get_params ||= if [0, 405, 501].include?(NS::Browser.head(homepage_url).code)
                                 { method: :get, maxfilesize: 1 }
                               else
                                 { method: :head }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cms_scanner
 version: !ruby/object:Gem::Version
-  version: 0.13.7
+  version: 0.13.8
 platform: ruby
 authors:
 - WPScanTeam
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-02-22 00:00:00.000000000 Z
+date: 2022-04-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ethon
@@ -236,14 +236,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.25.0
+        version: 1.26.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.25.0
+        version: 1.26.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement