From 094824bfd3a2ed8cd701b38440a193555cc68f37 Mon Sep 17 00:00:00 2001 From: Rob Fuller Date: Mon, 10 Feb 2014 16:55:11 -0500 Subject: [PATCH] Case-insensitive content-type check Was noticing that injection wasn't happening when the header was "Content-type" instead of the checked for "Content-Type". Headers could probably be put as .lower() from the beginning, but then again there might be header content that may break because of it. --- Responder.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Responder.py b/Responder.py index b9e243c..05c6e5d 100755 --- a/Responder.py +++ b/Responder.py @@ -1498,7 +1498,7 @@ def InjectData(data): return Gzip else: return data - if "Content-Type: text/html" in Headers: + if "content-type: text/html" in Headers.lower(): Len = ''.join(re.findall('(?<=Content-Length: )[^\r\n]*', Headers)) HasHTML = re.findall('(?<=