The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Two session handling rules with "check session is valid"

dmsilva | Last updated: Apr 25, 2022 11:06PM UTC

I am using two session handling rules. The first to keep the session authenticated and the second to update the CSRF token. It seems that when the first rules evaluates the session as valid, the subsequent rule will not check for validity, as if the concept of a valid session is shared between the two rules. Is this normal behaviour?

Liam, PortSwigger Agent | Last updated: Apr 26, 2022 09:24AM UTC