The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Dominvader removes CSP even if the plugin is turned off

TightropeMonkey | Last updated: Feb 24, 2023 09:36AM UTC

Hi Portswigger Team, I have a weird behavior in Burp Suite Pro v2023.1.2 Build 18945. When I am using the integrated chromium the dominvader plugin removes the CSP even though dominvader itself and prototype pollution is turned off. Only the "Remove CSP Header" is on, but in my understanding this should be disabled automatically as soon as I disable prototype pollution or dominvader itself. Could you please have a look into this? Thanks and cheers, TightropeMonkey

Hannah, PortSwigger Agent | Last updated: Feb 27, 2023 09:45AM UTC