Rizda Dwi Prasetya

[bug]: Unexpected request header modification when using browser extension as proxy

1

### Is there an existing issue for this? - [X] I have searched the existing issues ### Current behavior On https://hoppscotch.io/ , using this feature `Use the browser extension to...

Cannot detect JS injection of reading `document.cookie`

1

If the injected JS code is like the following: ``` alert('cookie: '+document.cookie); ``` This site is not able to detect it, and it will still shows green message. Cookie stealing...

### Affected Lines Known sample, but recommended to search more comprehensively. https://github.com/Midtrans/midtrans-php/blob/4929d87da0db94404e69ba43b967a98701572370/Midtrans/Sanitizer.php#L141 https://github.com/Midtrans/midtrans-php/blob/4929d87da0db94404e69ba43b967a98701572370/Midtrans/Sanitizer.php#L124 https://github.com/search?q=repo%3AMidtrans%2Fmidtrans-php%20substr&type=code ### Findings: Reproducible evidence: ```php ``` ### Issue Desc #### When: - sanitization in which merchant's...

TODO: check whether HTTP request body exists, if not throw a proper error. To prevent confusing array-key not exist related err msg.

1

## Current Unexpected: https://github.com/Midtrans/midtrans-php/blob/4929d87da0db94404e69ba43b967a98701572370/Midtrans/Notification.php#L23-L28 On that function, - when HTTP request come and that function get executed, - IF the HTTP request body is not exist, THEN it will [unexpectedly...