github-starred/burp-ui
2
0
Fork 0
mirror of https://github.com/ziirish/burp-ui.git synced 2026-05-21 06:45:24 -06:00
Code Issues 1 Projects Packages Wiki Activity Actions

add: allow to host burp-ui behind a sub-root path (see #128)

Browse source
This commit is contained in:
ziirish 2016-05-11 11:32:31 +02:00
parent 6d4dc51a5d
commit d269f00202
7 changed files with 137 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

28
burpui/__init__.py
View file

@ -111,7 +111,7 @@ def init(conf=None, verbose=0, logfile=None, gunicorn=True, unittest=False, debu
"""
from flask_login import LoginManager
from flask_bower import Bower
from .utils import basic_login_from_request
from .utils import basic_login_from_request, ReverseProxied
from .server import BUIServer as BurpUI
from .routes import view
from .api import api, apibp
@ -197,12 +197,6 @@ def init(conf=None, verbose=0, logfile=None, gunicorn=True, unittest=False, debu
# app.config['BUNDLE_ERRORS'] = True
app.config['REMEMBER_COOKIE_HTTPONLY'] = True
# manage application secret key
if not app.secret_key or app.secret_key == 'random':
from base64 import b64encode
app.secret_key = b64encode(os.urandom(256))
elif app.secret_key == 'none':
app.secret_key = None
app.jinja_env.globals.update(
isinstance=isinstance,
@ -222,6 +216,15 @@ def init(conf=None, verbose=0, logfile=None, gunicorn=True, unittest=False, debu
app.setup(app.config['CFG'])
# manage application secret key
if not app.secret_key or app.secret_key == 'random':
from base64 import b64encode
app.secret_key = b64encode(os.urandom(256))
elif app.secret_key == 'none':
app.secret_key = None
app.wsgi_app = ReverseProxied(app.wsgi_app, app)
# Manage gunicorn special tricks & improvements
if gunicorn: # pragma: no cover
logger.info('Using gunicorn')
@ -297,6 +300,17 @@ def init(conf=None, verbose=0, logfile=None, gunicorn=True, unittest=False, debu
bower = Bower()
bower.init_app(app)
@app.before_request
def setup_request():
if app.scookie:
from flask import request
criteria = [
request.is_secure,
request.headers.get('X-Forwarded-Proto', 'http') == 'https'
]
app.config['SESSION_COOKIE_SECURE'] = \
app.config['REMEMBER_COOKIE_SECURE'] = any(criteria)
@app.login_manager.user_loader
def load_user(userid):
"""User loader callback"""