Added warning if a header listed in SignedHeaders is missing from req…

…uest
NetSPI · Sep 27, 2019 · 43619f1 · 43619f1
1 parent ea41a35
commit 43619f1
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/src/main/java/burp/Utility.java b/src/main/java/burp/Utility.java
@@ -90,8 +90,12 @@ public static byte[] signRequest(IHttpRequestResponse messageInfo,
 
         StringBuilder canonicalHeaders = new StringBuilder();
 
-        for (String signedHeader : signedHeaderList){
-            canonicalHeaders.append(signedHeader.toLowerCase()).append(':').append(headerMap.get(signedHeader)).append('\n');
+        for (String signedHeader : signedHeaderList) {
+            if (headerMap.containsKey(signedHeader)) {
+                canonicalHeaders.append(signedHeader.toLowerCase()).append(':').append(headerMap.get(signedHeader)).append('\n');
+            } else {
+                pw.println("Warning: SignedHeader '" + signedHeader + "' does not exist in request headers.");
+            }
         }
 
         byte[] request = messageInfo.getRequest();