You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
InQL stores settings and history in the same place.
Over time the number of existing endpoints in InQL grows and pollutes the InQL Scanner tab.
Previously saved targets get loaded on every next invocation of Burp / InQL and polute new projects.
There is a user expectation that all stuff done in Temporary Project should be held in memory and not stored at disk, but this expectation is broken, because InQL does not make distinction between Temporary Projects and projects stored on disk.
Describe the solution you'd like
Store InQL history per-project. In case of Temporary Projects, don't store history at all.
Additional context
Project data is stored as a JSON string that gets saved by saveExtensionSetting API and gets loaded by corresponding loadExtensionSetting API call. Class name is used as an identification string in this API. In order to separate data per-project, project name should be added to this string.
Burp API does not offer a reliable method of querying current project name and the official suggestion seems to be scraping data from title bar. Burp API is in the process of a revamp though so better ways might appear soon.
The text was updated successfully, but these errors were encountered:
This issue is just for implementing persistence API. The new Montoya API provides interface for modifying per-project Settings (only applies to Burp Pro, obviously). We still need a way to access global options as well.
Is your feature request related to a problem? Please describe.
Describe the solution you'd like
Store InQL history per-project. In case of Temporary Projects, don't store history at all.
Additional context
Project data is stored as a JSON string that gets saved by saveExtensionSetting API and gets loaded by corresponding loadExtensionSetting API call. Class name is used as an identification string in this API. In order to separate data per-project, project name should be added to this string.
Burp API does not offer a reliable method of querying current project name and the official suggestion seems to be scraping data from title bar. Burp API is in the process of a revamp though so better ways might appear soon.
The text was updated successfully, but these errors were encountered: