Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Multiple content types specified - false positive

Anders | Last updated: Jan 21, 2016 11:50AM UTC

Just ran into this (relatively minor) false positive. (Burp Pro 1.6.34) The report was issued over a a) Header: Content-Type: application/x-javascript and b) the string: '<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />'; found in the body of the response. The code looks like it may be from tinymce.min.js (where I do find the same code). Not entirely easy to tell the difference between a real meta and a string with meta. The outer single quotes are in the code, though, and might help indicate that it's not a real meta.

PortSwigger Agent | Last updated: Jan 21, 2016 04:06PM UTC