[MITM] How I am supposed to reject a request based on its body?

[0x192]

Hello,

Thank you for this really nice open-source project!

After reading the documentation, I don't really understand how I can block a request if a pattern is found in the found.

It can be used to intercept and modify encrypted (HTTPS) traffic
https://opensource.saucelabs.com/forwarder/tutorials/mitm/

I don't see any settings similar to --deny-domains which could allow filtering based on regex of the content of the body for example.

Is it out of scope? Because right now I don't understand how you can interact dynamically with intercepted traffics.

Thank you

[Choraden]

Hi @0x192

Thanks for your interest in Forwarder!

The feature you're asking about hasn’t been implemented yet — you can track progress or leave feedback on it here: #584.
At the moment, our resources are limited, so we can’t commit to a specific delivery timeline.

That said, you can currently modify traffic using the following options:

• --header - Add or remove request headers.
• --response-headeer - Add or remove response headers.
• --credentials - Automatically add an authentication header to requests.

In the meantime, the feature you ask for should be relatively straightforward to implement using forwarder.RequestModifier. If you're interested in experimenting with it, I’d be happy to offer some guidance.

[0x192]

Oh! I missed #584. My bad.

In the meantime, the feature you ask for should be relatively straightforward to implement using forwarder.RequestModifier. If you're interested in experimenting with it, I’d be happy to offer some guidance.

Not sure if If I'm capable of doing it properly (without compromising performance for example). l may come back to you If I'll try :)