Failure to replace 2 tokens in the condition replacement #28
Description
I am replacing 2 tokens in a single request, one is the session cookie, and the other one is a CSRF token from a custom header.
When fetching the tokens from selection, it extracts only one currently selected. If I select the second CSRF token, it will be replaced with the first session token, and the first session token won't be replaced.
Steps:
- Error condition request requires 2 tokens, a session cookie, and CSRF in a custom header.
- Obtain a session token with a login request and response with a set-cookie header.
- Obtain a CSRF token with a second request that requires the session token, and respond with a custom header containing the CSRF token.
- In the Condition request replacement, Select the session token in the cookie header and replace it with the first session token.
- Then select the CSRF token from the custom header and replacing with the extracted CSRF token
- Result - the final request is sent without replacing the session cookie, and the CSRF token header gets replaced with the session token.
Sorry that I cannot share a screenshot.