Cyber Risks · PortSwigger Research

XChrome Logger Decoder

Summary: PortSwigger's BApp Store lists XChromeLogger Decoder, a Burp Suite extension by Marko Winkler, version 0.2, that adds a tab in the HTTP message editor to display X-ChromeLogger-Data in decoded form. The listing was last updated on 15 December 2021, rates its overall system impact as Low, and notes that extensions are written by third-party users of Burp with no warranty from PortSwigger.

Why it matters: The tool that decodes X-ChromeLogger-Data has sat at version 0.2 since December 2021, so anyone relying on it to read what an application's Chrome logger is emitting is working with an extension PortSwigger explicitly does not warrant for quality or usefulness.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related