Add check for reflected null origins.

[CoreyD97]

• Corsair_scan version: 0.2.0
• Python version: 3.7
• Operating System: Pop!_OS

Description

It'd be useful to add a check for a trusted null origin. There's a bunch of cases a browser might send a null origin, and so adding a check for this would help locate endpoints which have whitelisted the null origin.

The current implementation does include a check for null origins, but only if this is sent when the tool attempts one of the existing origin checks (e.g. Origin: https://scarymonster.com), and not reflected nulls.

[javixeneize]

Hi

Thanks for this. So, your use case is to send a NULL origin and check if it is reflected? I would say it would be the same as sending a fake origin and having it reflected, isnt it?

Anyway, this sounds like an interesting idea, let me research about it

[CoreyD97]

I would say it would be the same as sending a fake origin and having it reflected, isnt it?

For the most part yes, this is common when it is reflected. Though it is possible that a dev create a whitelist of origins and only respond with the CORS header when the origin was valid. This'll help detect those instances.

As with my previous comment, I'll happily create a PR for this soon.