dw1 875b229313 fix(http): read annotations only before the request line (#8062) ...

Raw requests applied @Host, @tls-sni and @timeout from any matching
line of the rendered request, headers and body included. A response
value reused in a later request could carry an "@Host:" line and send
that request, with its body, to a host the template does not name.

The raw parser and the docs already define annotations as the "@"
lines before the request line. raw.SplitAnnotations now holds that
rule once, and the parser, the request annotations, @once and the
compile-time @timeout check all read from it.

Fixes: #8061

Signed-off-by: Dwi Siswanto <[email protected]>

2026-11-06 03:29:42 +07:00

..

testdata/gofuzz-corpus

fuzz: add parser harnesses for raw requests & templates (#7459)

2026-06-23 23:39:13 +02:00

doc.go

nuclei v3 : misc updates (#4247)

2023-10-17 17:44:13 +05:30

fuzz_harness_test.go

fuzz: add parser harnesses for raw requests & templates (#7459)

2026-06-23 23:39:13 +02:00

fuzz_harness.go

fuzz: add parser harnesses for raw requests & templates (#7459)

2026-06-23 23:39:13 +02:00

fuzz.go

fuzz: add parser harnesses for raw requests & templates (#7459)

2026-06-23 23:39:13 +02:00

raw_test.go

fix(http): read annotations only before the request line (#8062)

2026-11-06 03:29:42 +07:00

raw.go

fix(http): read annotations only before the request line (#8062)

2026-11-06 03:29:42 +07:00