Telerik Forums
Fiddler Forum
1 answer
1.2K+ views

I'm using Angular, I want to change the theme dynamically at the runtime, It's not evident the change the sass variables at the runtime -we can't -,

I've seen your Sass ThemeBuilder https://themebuilder.telerik.com/kendo-angular-ui

I'm looking for a similar solution, how could you apply the color changes dyanmically ?

Thanks in advance

Stoyan
Telerik team
 answered on 05 Oct 2021
5 answers
1.4K+ views

I have trust root certificate.. and want to insert into

I want to change DO_NOT_TRUST to TRUST 

How can change this.. it is

 

 

 

Кирилл
Top achievements
Rank 1
Iron
 answered on 05 Oct 2021
0 answers
1.0K+ views

Hi All,

I am having an issue where I am not able to enable "decrypt HTTPS traffic' in Fiddler Classic. It freezes and does nothing until I end the task using task manager. I tried this on 4 different workstations and same issue. Let's focus on one. It is running Windows 10 Pro 20H2 build 19042.1237. Please let me know if they are any logs I can collect/review to try and determine what is causing the issue. Thanks!

logonzal
Top achievements
Rank 1
 asked on 04 Oct 2021
0 answers
1.1K+ views

Alright so, In my application, i am currently using:

 oSession.utilReplaceInResponse(".canUseService=function(a,b,c){", ".canUseService=function(a,b,c){return true;");

However, after this is used; the original file can be seen using the default cached file, virtually being able to see all the changes I have done. This is a security issue for me. and since i'll be using the file after the replaces have been done, is there a way to essentially clear the cache of the file after using util replaceinreponse...

 

What I Need is is this:

 

1. Replacementsinresponse occurs

2. cache cleared, meaning that the changes you made are what is running and if you were to reload the browser, then the original is back

3. If cache is cleared, then the browser's cannot show the "Modified Responses"

EDIT: While running the changes in the browser, i cleared cached. The Modified changes were still running, yet when you open the url for the original document, it no longer shows the modified responses; which means that we can clear the cache while still running the page.

Thanks!

Ryan
Top achievements
Rank 1
Iron
 updated question on 03 Oct 2021
1 answer
828 views

Right-clicking on an entry and selecting Copy->Response DataURI copies base64-encoded response string to the clipboard. Saving the same response to disk (right click, Save->Response->Response Body), however, does not do that. Same goes for files autosaved into saz archives.

Is there a way to save the base64-encoded response string to a file (ideally, during autosaves)? Thank you!

Nick Iliev
Telerik team
 answered on 01 Oct 2021
1 answer
884 views

I'm running a webserver on my PC that serves a REST API. I'm trying to capture requests from a remote client having set up the registry ReverseProxyForPort = 50000 where my server is listening on 50000 and my remote client is connecting to https://webseerver:8888/api

I can connect from remote client directly to webserver:50000, but an attempt to connect to webserver:8888 results in a timeout with no sessions in the fiddler traffic window.

 
Alec
Top achievements
Rank 1
Iron
 answered on 01 Oct 2021
1 answer
452 views

Hi,

 

I want to save specific packets to individual files. These packets are in JSON format. Is it possible to save the packets on the fly, or can they only be saved once capturing has stopped?

 

Any help to achieve this would be appreciated. Thanks

Nick Iliev
Telerik team
 answered on 27 Sep 2021
1 answer
290 views

Is there a way to control which headers that are filtererd out during an export of sessions to a Visual Studio WebTest file?

Since Microsoft is dropping support for both IE11 and Visual Studio Loadtesting features, the Web Test Recorder is becoming more and more of a problem for recording webtest files. For that reason we have started to use Fiddler instead, but noticed several draw backs, the worst being that all requests have the Referer header removed during export (even with ALL options disabled during save).

Another draw back is that Fiddlers option to handle Redirects in such export does not seem to be working. Requests that are caused by the browser following a redirect har exported like any other normal request (in the webtest request the option is set to Follow Redirects on all of these as well). We can handle this problem manually and remove the requests in a redirect chain, but the Referer header removal is a bigger problem.

If this is not available as a config setting somewhere, is it possible to change this behaviour? If not, is it possible to get the code for the export plugin so we can modify the behaviour? If that is not possible, can we create/code our own plugins to the WebTest exporter?

Nick Iliev
Telerik team
 answered on 27 Sep 2021
3 answers
646 views
This seems like a new problem, because I am sure this used to work. I'm using the Amazon Web Services command-line interface (CLI). This makes https calls using Python. If Fiddler is running, I can see 200 responses that show that tunneling is working, and I get the correct results for the command. However, if then enable decryption, things go south. I get a string of 5 tunnel requests (all with 200 responses):

      CONNECT iam.amazonaws.com:443 HTTP/1.0
      Host: iam.amazonaws.com:443
      A SSLv2-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
      Version: 3.1 (TLS/1.0)
etc.

After 5 attempts, the command itself on the command line returns this error:

[Errno 1] _ssl.c:504: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Is there something I can do to configure Fiddler _with_ HTTPS decryption that will work with the AWS CLI?










surbhi
Top achievements
Rank 1
Iron
 answered on 27 Sep 2021
0 answers
1.3K+ views

Hi,

I am doing some testing with a scenario where I have an HTML page with some Javascript that uses XHR to do a cross-domain request for a resource that is in a different domain, and I am trying to use a CORS Proxy called "CORS Anywhere" to determine if that will work.

I have a basic test configuration for this scenario working, but some of the resources (URLs) that we need to access (using the Javascript/XHR are "protected" by Oracle "OAM" web access control product, and my test fails when that is the case.

The way that OAM works is that there is an agent (webgate) on the Apache that is hosting the target resource, and when the webgate sees a request incoming for the protected resource, the webgate will cause a 302/redirect response to occur, and I think that that is the start of the problem.

[In the Apache logs, I can the request for the resource, and a 302 redirecting to one of the OAM endpoints, so I am pretty sure that that first OAM redirect is occurring.]

I have been trying various things to try to "see" what is going on, including the web developer tools, etc., and live headers plugin for the browser (both Chrome and Firefox), but with those, I only see the initial request and the last request for the resource, and that last one is failing.

I have also tried sniffers, including Wireshark, but our dev environment is on AWS, and even with Wireshark and the capture in promiscuous mode, I don't see all the requests, especially the request form the Javascript/XHR and the redirects that I believe are being caused because of the webgate.

So, I am now trying to use Fiddler. 

However, even when I use Fiddler, I am only seeing the first request and the final request.  The requests from the Javascript/XHR to just prior to the last request are not appearing at all :(!!

So I was wondering:  Shouldn't Fiddler be able to capture those requests (and responses) that appear to be missing?  Is there something else that I need to configure in order for Fiddler to be able to "see" those requests?

Here's the HTML/Javascript/XHR page that is doing the request to the target URL:


<html>
<body>

<script>
// 1. Create a new XMLHttpRequest object
let xhr = new XMLHttpRequest();

// 2. Configure it: GET-request for the URL /article/.../load
xhr.open('GET', 'http://192.168.xxx.yy:8080/http://charlieeastweb.....com:7777/target-charlie/index.html');


// 3. Send the request over the network
xhr.send();

// 4. This will be called after the response is received
xhr.onload = function() {
  if (xhr.status != 200) { // analyze HTTP status of the response
    alert(`Error ${xhr.status}: ${xhr.statusText}`); // e.g. 404: Not Found
  } else { // show the result
    alert(`FROM javascript in xhr-fakewava-PROTECTEDPAGE.html, Done, got ${xhr.response.length} bytes`); // response is the server response
  }
};

xhr.onprogress = function(event) {
  if (event.lengthComputable) {
    alert(`FROM javascript in xhr-fakewava-PROTECTEDPAGE.html, event.type is: ${event.type}`);
    alert(`FROM javascript in xhr-fakewava-PROTECTEDPAGE.html, event.lengthComputable is true, Received ${event.loaded} of ${event.total} bytes`);
  } else {
    alert(`FROM javascript in xhr-fakewava-PROTECTEDPAGE.html, event.type is: ${event.type}`);
    alert(`FROM javascript in xhr-fakewava-PROTECTEDPAGE.html, event.lengthComputable is false, Received ${event.loaded} bytes`); // no Content-Length
  }

};

xhr.onerror = function() {
  alert("Request failed");
};

</script>

</body>
</html>

In the above, the:

'http://192.168.xxx.yy:8080/http://charlieeastweb.....com:7777/wavatarget-charlieeastweb05/index.html'

is a kind of "composite" URL:

the "http://192.168.xxx.yy:8080" is the URL of the CORS Anywhere CORS proxy server (actually on the same machine as the Apache that is serving the HTML page).

The

http://charlieeastweb.....com:7777/target-charlie/index.html

is the URL of the protected target resource.

So I think/GUESS that:

  • Browser makes a request for the HTML page that contains the Javascript/XHR code, then  <== [This is the 1st request I see in Fiddler - response is 200/OK]
  • The Javascript/XHR code make request, which goes to the http://192.168.xxx.yy:8080 (which is the CORS Anywhere server), then
  • CORS Anywhere takes the request and forwards it to the http://charlieeastweb....com:7777/target-charlie/index.html (the resource, protected by OAM, then
  • When the OAM webgate gets that request, it sends the first 302 response back. 
  • etc.?

The 2nd (and only) other request/response I see in Fiddler is a request to the http://charlieeastweb....com:7777/target-charlie/index.html. The response to this 2nd request is a 200/OK. This request includes an "Origin:" HTTP request header, and the response includes an "access-control-allow-origin" HTTP response header, which I believe is being added by the CORS Anywhere CORS Proxy.

However, the contents of the page that is in that response is an error page that we see when the OAM processing has failed, so something is going wrong within the OAM part of the protocol, but I am not able to see anything :(!!

 

I am really new to using Fiddler, and to get it to start logging, I followed steps to set up Chrome with a proxy at localhost:8888.

Is it possible that maybe the reason Fiddler is not logging the requests/responses that appear to be missing is that once the Javascript/XHR makes the request to the protected URL, the ensuing redirects are not going through/not using the Chrome proxy settings???

If so, what additional configuration do I need?

Thanks!

Jim

 

 

 

 

 

 

 

 

 

O
Top achievements
Rank 1
 updated question on 26 Sep 2021
Narrow your results
Selected tags
Tags
+? more
Top users last month
Cynthia
Top achievements
Rank 1
Iron
Toby
Top achievements
Rank 3
Iron
Iron
Iron
Danielle
Top achievements
Rank 1
Iron
Iron
Joel
Top achievements
Rank 3
Bronze
Bronze
Iron
yw
Top achievements
Rank 2
Iron
Iron
Iron
Want to show your ninja superpower to fellow developers?
Top users last month
Cynthia
Top achievements
Rank 1
Iron
Toby
Top achievements
Rank 3
Iron
Iron
Iron
Danielle
Top achievements
Rank 1
Iron
Iron
Joel
Top achievements
Rank 3
Bronze
Bronze
Iron
yw
Top achievements
Rank 2
Iron
Iron
Iron
Want to show your ninja superpower to fellow developers?
Want to show your ninja superpower to fellow developers?