nuclei/v2/pkg/protocols/headless/engine/rules.go

package engine

import (
	"fmt"

	"github.com/go-rod/rod"
)

// routingRuleHandler handles proxy rule for actions related to request/response modification
func (p *Page) routingRuleHandler(ctx *rod.Hijack) {
	// usually browsers don't use chunked transfer encoding so we set the content-length nevertheless
	ctx.Request.Req().ContentLength = int64(len(ctx.Request.Body()))

	for _, rule := range p.rules {
		if rule.Part != "request" {
			continue
		}

		switch {
		case rule.Action == ActionSetMethod:
			ctx.Request.Req().Method = rule.Args["method"]
		case rule.Action == ActionAddHeader:
			ctx.Request.Req().Header.Add(rule.Args["key"], rule.Args["value"])
		case rule.Action == ActionSetHeader:
			ctx.Request.Req().Header.Set(rule.Args["key"], rule.Args["value"])
		case rule.Action == ActionDeleteHeader:
			ctx.Request.Req().Header.Del(rule.Args["key"])
		case rule.Action == ActionSetBody:
			body := rule.Args["body"]
			ctx.Request.Req().ContentLength = int64(len(body))
			ctx.Request.SetBody(body)
		}
	}
	_ = ctx.LoadResponse(p.instance.browser.httpclient, true)

	for _, rule := range p.rules {
		if rule.Part != "response" {
			continue
		}

		switch {
		case rule.Action == ActionAddHeader:
			ctx.Response.Headers().Add(rule.Args["key"], rule.Args["value"])
		case rule.Action == ActionSetHeader:
			ctx.Response.Headers().Set(rule.Args["key"], rule.Args["value"])
		case rule.Action == ActionDeleteHeader:
			ctx.Response.Headers().Del(rule.Args["key"])
		case rule.Action == ActionSetBody:
			body := rule.Args["body"]
			ctx.Response.Headers().Set("Content-Length", fmt.Sprintf("%d", len(body)))
			ctx.Response.SetBody(rule.Args["body"])
		}
	}
}