facebookincubator / TTPForge / 18575395999

66%

main: 67%

Pull #564

github

HTTPRequest Block Response Headers

Summary:
### What?
This diff adds a feature to the HTTPRequest block which allows a user to specify whether or not they'd like the server headers returned as part of the response. The option defaults to `false` so as not to break existing TTPs which are built not to expect headers as part of the response.

### Why?
Retrieving headers is a critical part of many attack flows, particularly ones that involve gathering cookies to manage sessions. It is also a requirement when a user makes a `HEAD` type request.

Reviewed By: RoboticPrism

Differential Revision: D84760010

3 of 25 new or added lines in 1 file covered. (12.0%)

1767 of 3422 relevant lines covered (51.64%)

9.1 hits per line