HAR Export doesn't properly encode content
Categories
(DevTools :: Netmonitor, defect, P3)
Tracking
(Not tracked)
People
(Reporter: thorin.geo, Unassigned)
References
(Blocks 1 open bug)
Details
Attachments
(2 files)
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0
Steps to reproduce:
- Visit: http://demo.owasp-juice.shop/rest/admin/application-configuration
- Open Dev Tools.
- Goto the network tab (reload if you need in order to see the traffic).
- Export the request/response as HAR. (Right click "Save All as HAR")
- Open the HAR in Notepad++ or whatever.
- Note the content claims to be base64 encoded but isn't:
"content": {
"mimeType": "application/vnd.mozilla.json.view; charset=utf-8",
"size": 18755,
"encoding": "base64",
"text": "{\"config\":{\"server\":{\"port\":3000,\"basePath\":\"\"},...snip
Firefox 98.0.2. (Also had an example of the issue with 97.0.2) [Looking at the content-types below it seems to have something to do with Firefox's JSON pretty printing.]
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0
Actual results:
"content": {
"mimeType": "application/vnd.mozilla.json.view; charset=utf-8",
"size": 18755,
"encoding": "base64",
"text": "{\"config\":{\"server\":{\"port\":3000,\"basePath\":\"\"},...snip
Expected results:
The content should have been saved properly encoded:
"content" : {
"size" : 18755,
"compression" : 0,
"mimeType" : "application/json; charset=utf-8",
"encoding" : "base64"
"text" : "eyJjb25maWciOnsic2VydmVyIjp7InBvcnQiOjMwMDAsImJhc2VQYXRoIjoiIn0sImFwcGxpY2F0aW9uIjp7ImRvb...snip
},
Comment 1•3 years ago
|
||
The Bugbug bot thinks this bug should belong to the 'DevTools::Netmonitor' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.
This is more like what is expected. (This was produced with OWASP ZAP.)
Comment 4•3 years ago
|
||
Thank you for the report!
I can easily reproduce on my machine (Win10, latest m-c 100)
Comment 5•3 years ago
|
||
Here is the source responseible for building the content
field in the HAR file (including text
and encoding
fields)
We should make sure the text is properly encoded and the encoding
field set.
Hey Jan, if I wanted to setup a dev environment and try to tackle this where would I find like a "getting started guide" or something like that?
Comment 7•2 years ago
|
||
Hi Thorin, follow these docs: https://firefox-source-docs.mozilla.org/devtools/index.html
Please, let me know whether I should assign this bug to you.
Description
•