removed getting the Location header

bkollmar · bkollmar · commit 67f7517b3935 · 2025-04-23T14:21:13.000-04:00
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/SstiScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/SstiScanRule.java
@@ -365,7 +365,6 @@ private void searchForMathsExecution(
         }
 
         int statusCode = testMessage.getResponseHeader().getStatusCode();
-        String redirectUrl = testMessage.getResponseHeader().getHeader("Location");
 
         if (fixSyntax) {
             codeFixPrefixes = WAYS_TO_FIX_CODE_SYNTAX;
@@ -408,7 +407,7 @@ private void searchForMathsExecution(
                     HttpMessage newMsg = getNewMsg();
 
                     setParameter(newMsg, paramName, renderTest);
-                    if (!(statusCode >= 300 && statusCode < 400 && redirectUrl != null)) {
+                    if (!(statusCode >= 300 && statusCode < 400)) {
                         sendAndReceive(newMsg, false);
 
                         for (SinkPoint sink : sinksToTest) {
@@ -450,7 +449,7 @@ private void searchForMathsExecution(
                             }
                         }
                     }
-                    if (statusCode >= 300 && statusCode < 400 && redirectUrl != null) {
+                    if (statusCode >= 300 && statusCode < 400) {
                         try {
                             for (TemplateFormat format : TEMPLATE_FORMATS) {
                                 // Construct the SSTI payload

Original file line number	Diff line number	Diff line change
`@@ -365,7 +365,6 @@ private void searchForMathsExecution(`
`365`	`365`	`}`
`366`	`366`
`367`	`367`	`int statusCode = testMessage.getResponseHeader().getStatusCode();`
`368`		`- String redirectUrl = testMessage.getResponseHeader().getHeader("Location");`
`369`	`368`
`370`	`369`	`if (fixSyntax) {`
`371`	`370`	`codeFixPrefixes = WAYS_TO_FIX_CODE_SYNTAX;`
`@@ -408,7 +407,7 @@ private void searchForMathsExecution(`
`408`	`407`	`HttpMessage newMsg = getNewMsg();`
`409`	`408`
`410`	`409`	`setParameter(newMsg, paramName, renderTest);`
`411`		`- if (!(statusCode >= 300 && statusCode < 400 && redirectUrl != null)) {`
	`410`	`+ if (!(statusCode >= 300 && statusCode < 400)) {`
`412`	`411`	`sendAndReceive(newMsg, false);`
`413`	`412`
`414`	`413`	`for (SinkPoint sink : sinksToTest) {`
`@@ -450,7 +449,7 @@ private void searchForMathsExecution(`
`450`	`449`	`}`
`451`	`450`	`}`
`452`	`451`	`}`
`453`		`- if (statusCode >= 300 && statusCode < 400 && redirectUrl != null) {`
	`452`	`+ if (statusCode >= 300 && statusCode < 400) {`
`454`	`453`	`try {`
`455`	`454`	`for (TemplateFormat format : TEMPLATE_FORMATS) {`
`456`	`455`	`// Construct the SSTI payload`