-
Notifications
You must be signed in to change notification settings - Fork 35
Open
Description
It would be nice to have some protection for ATOR to prevent looping requests. This have happened to me in two cases, both with Bearer token:
- I set up ATOR for new Bearer token update and for some reason I remove it in repeater to see if the endpoint requires the authentication - it starts looping as the regex can't be matched - this can be fixed by proper regex settings but it is not intuitive.
- While testing IDOR I got message from server: 401 User "XXX is not associated with "YYY". And ATOR again keeps trying to update the Bearer but gets same response all over again and ends up in a loop.
Solution:
Count max retries for a one request. However I guess there can be some implementing challenges.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels