COR's credentials for HTTP Request Operation
- Dominant language
- JavaScript
- Stars
- 35.8k
- Forks
- 4.1k
- Avg merge
- 2d 26m
- Merged PRs (30d)
- 33
Description
Please support credentials: include in CyberChef/src/core/operations/HTTPRequest.mjs. I don't know if would cause issues if it was the default or if it should be an option - but its useful if the COR's site is authenticated.
```
93 });
94
95 const config = {
96 method: method,
97 headers: headers,
98 mode: modeLookup[mode],
+ 99 credentials: "include",
100 cache: "no-cache",
101 };
102
103 if (method !== "GET
```
Contributor guide
Research direction
Start in CyberChef/src/core/operations/HTTPRequest.mjs at the fetch configuration around the headers, mode, and cache settings. Determine whether credentials should always be included or exposed as an option, considering authenticated CORS requests, then verify the HTTP Request operation behaves as intended for authenticated sites.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- frontend, networking
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100