Skip to content

Improper Form Submission While Crawling SPAs #92

@darshanpjpt

Description

@darshanpjpt

Hello,

Htcap is not submitting forms correctly while crawling SPAs.

For example, when I crawled the website https://brokencrystals.com with htcap, it didn't send the requests properly while crawling.

  • The actual login request looks like below, where the form is submitted to /api/auth/login endpoint with POST request and json body.

    actual_login

  • On the other hand, htcap sent a GET request with data in URL to /userlogin endpoint (which is a frontend page that does not handle any backend operations)

    htcap_login

I have seen this same behavior multiple times while crawling other SPAs also.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions