only send 2nd/3rd "setStatusCode" request if cachebuster was found

Hackmanit · Apr 27, 2022 · ed34eb3 · ed34eb3
1 parent 190c5f0
commit ed34eb3
Showing 1 changed file with 12 additions and 10 deletions.
diff --git a/web-cache-vulnerability-scanner.go b/web-cache-vulnerability-scanner.go
@@ -317,18 +317,20 @@ func runTests(rec int, u string, progress string, foundUrls *[]string, stat stri
 	}
 	*/
 
-	// retrieve response with cachebuster
-	pkg.Config.Website, err = pkg.GetWebsite(u, false, true)
-	if err != nil {
-		repWebsite.HasError = true
-		repWebsite.ErrorMessages = append(repWebsite.ErrorMessages, err.Error())
-		report.Websites = append(report.Websites, repWebsite)
+	// retrieve response with cachebuster if cachebuster was found
+	if pkg.Config.Website.Cache.CBwasFound {
+		pkg.Config.Website, err = pkg.GetWebsite(u, true, true)
+		if err != nil {
+			repWebsite.HasError = true
+			repWebsite.ErrorMessages = append(repWebsite.ErrorMessages, err.Error())
+			report.Websites = append(report.Websites, repWebsite)
 
-		msg := fmt.Sprintf("Couldn't test url: %s\n", err.Error())
-		pkg.Print(msg, pkg.Red)
+			msg := fmt.Sprintf("Couldn't test url: %s\n", err.Error())
+			pkg.Print(msg, pkg.Red)
 
-		pkg.Statistics[stat+"errorcachebuster"]++
-		return
+			pkg.Statistics[stat+"errorcachebuster"]++
+			return
+		}
 	}
 
 	/*******************************************/