gchq / gchq/CyberChef

COR's credentials for HTTP Request Operation

Open
#1,149 2 comments 0 reactions 0 assignees View on GitHub
feature improvement
Dominant language
JavaScript
Stars
35.8k
Forks
4.1k
Avg merge
2d 26m
Merged PRs (30d)
33

Description

Please support credentials: include in CyberChef/src/core/operations/HTTPRequest.mjs. I don't know if would cause issues if it was the default or if it should be an option - but its useful if the COR's site is authenticated.

```
93 });
94
95 const config = {
96 method: method,
97 headers: headers,
98 mode: modeLookup[mode],
+ 99 credentials: "include",
100 cache: "no-cache",
101 };
102
103 if (method !== "GET

```

Contributor guide

Open the contributing guide

Research direction

Start in CyberChef/src/core/operations/HTTPRequest.mjs at the fetch configuration around the headers, mode, and cache settings. Determine whether credentials should always be included or exposed as an option, considering authenticated CORS requests, then verify the HTTP Request operation behaves as intended for authenticated sites.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
frontend, networking
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.