aboutsummaryrefslogtreecommitdiffstats
path: root/examples/sslstrip.py
diff options
context:
space:
mode:
authorMaximilian Hils <git@maximilianhils.com>2016-07-02 02:01:46 -0700
committerMaximilian Hils <git@maximilianhils.com>2016-07-02 02:01:46 -0700
commitdbf7cb1a442e2c0823d853ca310395048496996d (patch)
tree2e6fa840f1b4f41f8a348a21569ddedf4a213668 /examples/sslstrip.py
parent6032c4f2352260d32032800a2ff694339e2af6b2 (diff)
downloadmitmproxy-dbf7cb1a442e2c0823d853ca310395048496996d.tar.gz
mitmproxy-dbf7cb1a442e2c0823d853ca310395048496996d.tar.bz2
mitmproxy-dbf7cb1a442e2c0823d853ca310395048496996d.zip
update examples: no decoded() anymore :tada:
Diffstat (limited to 'examples/sslstrip.py')
-rw-r--r--examples/sslstrip.py38
1 files changed, 18 insertions, 20 deletions
diff --git a/examples/sslstrip.py b/examples/sslstrip.py
index 8dde8e3e..77e91cc9 100644
--- a/examples/sslstrip.py
+++ b/examples/sslstrip.py
@@ -1,4 +1,3 @@
-from netlib.http import decoded
import re
from six.moves import urllib
@@ -19,22 +18,21 @@ def request(context, flow):
def response(context, flow):
- with decoded(flow.response):
- flow.request.headers.pop('Strict-Transport-Security', None)
- flow.request.headers.pop('Public-Key-Pins', None)
-
- # strip links in response body
- flow.response.content = flow.response.content.replace('https://', 'http://')
-
- # strip links in 'Location' header
- if flow.response.headers.get('Location', '').startswith('https://'):
- location = flow.response.headers['Location']
- hostname = urllib.parse.urlparse(location).hostname
- if hostname:
- context.secure_hosts.add(hostname)
- flow.response.headers['Location'] = location.replace('https://', 'http://', 1)
-
- # strip secure flag from 'Set-Cookie' headers
- cookies = flow.response.headers.get_all('Set-Cookie')
- cookies = [re.sub(r';\s*secure\s*', '', s) for s in cookies]
- flow.response.headers.set_all('Set-Cookie', cookies)
+ flow.request.headers.pop('Strict-Transport-Security', None)
+ flow.request.headers.pop('Public-Key-Pins', None)
+
+ # strip links in response body
+ flow.response.content = flow.response.content.replace('https://', 'http://')
+
+ # strip links in 'Location' header
+ if flow.response.headers.get('Location', '').startswith('https://'):
+ location = flow.response.headers['Location']
+ hostname = urllib.parse.urlparse(location).hostname
+ if hostname:
+ context.secure_hosts.add(hostname)
+ flow.response.headers['Location'] = location.replace('https://', 'http://', 1)
+
+ # strip secure flag from 'Set-Cookie' headers
+ cookies = flow.response.headers.get_all('Set-Cookie')
+ cookies = [re.sub(r';\s*secure\s*', '', s) for s in cookies]
+ flow.response.headers.set_all('Set-Cookie', cookies)