Method-based filtering for Deliver feature

[isacaya]

Is there currently a way to filter endpoints by their HTTP methods (e.g., GET, POST, DELETE, PATCH) when using the Deliver feature to send endpoints to DAST tools?

I just thought that if noir could exclude certain unsafe methods like DELETE or PATCH from requests, it would allow us to avoid unintended side effects in sensitive environments during testing (e.g., accidentally deleting existing data), while still passing safer methods like GET or HEAD.

[hahwul]

@isacaya
Hey, hope you're doing great!

Currently, it's not possible. --use-matchers and --use-filters are intended for this, but they only check URLs.
I'll add support for HTTP methods as well!

[hahwul]

@isacaya
Just added that feature, and you can use it as shown below. Since it's an extension of the existing functionality, we're releasing it as a bugfix version(v0.23.1) right away!

noir -b ./spec/functional_test/fixtures/crystal/kemal \
       --send-proxy http://localhost:8070 \
       --use-filters "POST" \
       -u https://www.hahwul.com


# noir -b ./source --send-proxy http://localhost:8080 --use-filters "GET:/admin"

---

Release: https://github.com/owasp-noir/noir/releases/tag/v0.23.1
Updated document: https://owasp-noir.github.io/noir/usage/more_features/deliver/

[hahwul]

@isacaya
Thanks for the great idea! I'd love to list you as a Contributor, but GitHub only tracks code contributions.

If you're up for it, a quick README tweak can help me record your contribution and add you to the Contributors list! Let me know if you're interested.

[isacaya]

@hahwul Wow, That was super quick! Thanks for the fast feedback and implementation!

[hahwul]

@isacaya
Ah! If you're on Homebrew, hold tight! The release is still working its way through the Homebrew process. Keep an eye out!
Homebrew/homebrew-core#233885

[isacaya]

And I’d love to be added as a contributor, but the README already looks so clean and polished that I’m hesitant to make changes just to add something. I’ll definitely come back with a more meaningful contribution soon!

[hahwul]

Got it!! I respect your thoughts. Looking forward to your meaningful contribution 🤩