alecblance / s3bucketlist Goto Github PK

Delete button deletes unselected buckets.

An example of which is All Users have 2 permissions such as READ_ACP and READ. The plugin instead outputs it separately not under the same All Users header. As you may read in this line it pushes directly to the bucketPermissions instead of checking if the permission is already present thus giving us the repetitive permission.

Describe the bug
So there are over 50+ captured buckets, I wanted delete only few specific buckets by clicking 'Delete' button however it works sometimes and other times even after multiple click it doesn't work

To Reproduce
Steps to reproduce the behavior:

1. see the captured multiple buckets which seems not vulnerable
2. Click on 'Delete', and check if the bucket decreases

Expected behavior
Can't delete buckets manually one by one,

• Browser: Firefox ESR
• Version [78.15.0]

Is your feature request related to a problem? Please describe.
Add-on only checks ACLs, but sometimes a bucket has juicy info available at root (<ListBucketResult>), while denying access to ACL.

Describe the solution you'd like
Instead of just fetching 'http://'+hostname+'/?acl', also fetch root and report if a 200 is returned.
something like:

let req = fetch('http://' + hostname + '/', { method: 'HEAD'})
if (req.ok) {
   permName = "access to <ListBucketResult>";
}

Some of the buckets' permissions sometimes attached to different bucket.

HI,
The firefox add-ons link is broken, please update a new link.
Broken link
Thank you.