Function requestMethodOverrideQuery

cmd/requester.go:2894–2934

requestMethodOverrideQuery tests _method query parameter override. Many web frameworks (Rails, Laravel, etc.) support overriding the HTTP method via a _method query parameter when the request is POST.

(options RequestOptions)

// Many web frameworks (Rails, Laravel, etc.) support overriding the HTTP method
// via a _method query parameter when the request is POST.
func requestMethodOverrideQuery(options RequestOptions) {
	overrideMethods := []string{"GET", "PUT", "PATCH", "DELETE", "OPTIONS"}

	w := goccm.New(maxGoroutines)
	p := newProgress("method-override-query", len(overrideMethods))

	for _, overrideMethod := range overrideMethods {
		time.Sleep(time.Duration(delay) * time.Millisecond)
		w.Wait()
		go func(overrideMethod string) {
			defer w.Done()
			defer p.done()

			// Append _method= query parameter
			separator := "?"
			if strings.Contains(options.uri, "?") {
				separator = "&"
			}
			targetURI := options.uri + separator + "_method=" + overrideMethod

			// Send as POST (frameworks only process _method on POST)
			resp, err := requestWithRetry("POST", targetURI, options.headers, options.proxy, options.rateLimit, options.timeout, options.redirect)
			if err != nil {
				if errors.Is(err, ErrRateLimited) {
					return
				}
				logVerbose(err)
				return
			}

			if isCalibrationMatch(resp.contentLength) {
				return
			}
			result := resultFromResponse("POST "+targetURI, false, "method-override-query", resp)
			attachHTTPReplay(&result, "POST", targetURI, options.headers, "", options.redirect, options.proxy, options.timeout)
			printResponse(result, "method-override-query")
		}(overrideMethod)
	}
	w.WaitAllDone()
	p.finish()
}

func requestMethodOverrideHeaders(options RequestOptions) {
	overrideMethods := []string{"GET", "PUT", "PATCH", "DELETE", "OPTIONS"}