Submitting URLs for Active Scan does not work. about burp-rest-api HOT 2 CLOSED

On line 183 of BurpService.java, the URL that gets returned from the analyzeRequest() method appears to be forcefully appending the port #. I reconstructed the behavior with this unit test:

   @Test
   public void testStartsWith() throws Exception {
          String foo = "https://j2ee.dev.rms.ray.com/reference";
          URIBuilder urib = new URIBuilder(foo);
          urib.setPort(443);
          
          URI uri = urib.build();
          String externalForm = uri.toURL().toExternalForm();
          assertEquals(true, foo.startsWith(externalForm));
   }

So at some point in Burp code, we’re explicitly setting the port number when we prepare to return the URL back via the BurpExtender.getCallbacks().analyzeRequest() method. I've contacted portswigger support with a more detailed description of this bug, but the end result is that the logic here in BurpService.java is going to cause difficulties as the version of the URL stored in the "in scope sitemap" isn't going to align with the "baseUrl" that is being referenced here.

from burp-rest-api.

Pull request #40 resolves this problem.

from burp-rest-api.