Skip to main content

RangeSmuggleProbe

Struct RangeSmuggleProbe 

Source
pub struct RangeSmuggleProbe {
    pub variant: RangeSmuggleVariant,
    pub header_lines: Vec<(String, String)>,
    pub description: String,
    pub canary: Canary,
}
Expand description

A Range-header smuggle probe.

Fields§

§variant: RangeSmuggleVariant§header_lines: Vec<(String, String)>

Header lines to attach. Most variants emit one (name, value) pair; the duplicate-header variant emits two.

§description: String§canary: Canary

Implementations§

Source§

impl RangeSmuggleProbe

Source

pub fn empty_range_set() -> Self

Range: bytes= — empty range set.

Source

pub fn reversed_first_last(first: u64, last: u64) -> Self

Range: bytes={first}-{last} with first > last. Strict = 416. Lax = swapped.

Source

pub fn overlapping_ranges() -> Self

Range: bytes=0-99,50-149 — overlapping spans.

Source

pub fn over_large_last_position() -> Self

Range: bytes=0-{LARGE} — over-large last position. The position is drawn from SAFE_LARGE_LAST_POS per-call.

Source

pub fn whitespace_inside_range() -> Self

Range: bytes= 0 - 99 — whitespace sprinkled in the spec. Specific whitespace insertion locations are randomised per call so signature WAFs that pin “exactly one space after =” don’t catch every probe.

Source

pub fn suffix_length_as_negative_position(suffix_len: u64) -> Self

Range: bytes=-1000 — suffix range. Some implementations misread the leading - as a sign.

Source

pub fn non_bytes_unit() -> Self

Range: <unit>=0-9 — non-bytes unit. Unit drawn from NON_BYTES_UNITS per-call.

Source

pub fn duplicate_header_first_wins_benign(smuggle_range: &str) -> Self

Two Range: header lines — first benign full-resource, second the smuggled range.

Trait Implementations§

Source§

impl Clone for RangeSmuggleProbe

Source§

fn clone(&self) -> RangeSmuggleProbe

Returns a duplicate of the value. Read more
1.0.0 (const: unstable) · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for RangeSmuggleProbe

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl SmuggleProbe for RangeSmuggleProbe

Source§

fn canary(&self) -> &Canary

Per-probe correlation token. Splice into a custom header (X-Probe-Id, etc.) so server-side responses can be attributed to the specific variant that triggered them.
Source§

fn technique(&self) -> String

Stable technique identifier in family.variant form. Used in telemetry, JSON output, and reproducer logs. Example: "cookie.duplicate-name-last-wins".
Source§

fn description(&self) -> &str

Human-readable one-line description for operator logs.
Source§

fn artifact(&self) -> SmuggleArtifact

The wire artifact this probe produces.

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<ST, DT> CastableFrom<ST, Initialized, Initialized> for DT
where ST: ?Sized, DT: ?Sized,

Source§

impl<ST, DT> CastableFrom<ST, Uninit, Uninit> for DT
where ST: ?Sized, DT: ?Sized,

Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T> Instrument for T

Source§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided Span, returning an Instrumented wrapper. Read more
Source§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> Read<Exclusive, BecauseExclusive> for T
where T: ?Sized,

Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

Source§

fn vzip(self) -> V

Source§

impl<T> WithSubscriber for T

Source§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a WithDispatch wrapper. Read more
Source§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a WithDispatch wrapper. Read more