postman - only domain being scanned

[random-robbie]

anyway to make it so postman stuff has to contain the domain that is being scanned? always find it's picking up stuff not related to the domain being scanned.

[TheTechromancer]

Can you give a specific example? Postman should only be returning results that contain the target domain in some form.

[random-robbie]

I'll try find scan results and upload them tomorrow

[TheTechromancer]

Hmm, it appears postman's search is "smart".

That's annoying.

@domwhewell-sage what do you think?

[TheTechromancer]

It would be nice if we could send a parameter that made the search literal, something like quotes for a Google search. If there isn't one we'll have to manually discard results that don't contain the query. Which actually wouldn't be too hard.

[domwhewell-sage]

I'm not sure there's a way to make the postman search literal.

@TheTechromancer I think discarding results is the way to go, at the moment all workspace are searched that are returned from the query. What if we only append the workspace ID if it contains the ORG_STUB?

[TheTechromancer]

Yeah I think that's the way to go. This will require a small rework, since it'll require us to make the requests inside the module instead of emitting the UNVERIFIED_URLs to httpx. (I suppose it wouldn't be the end of the world if we requested them twice, but I'd rather not)

[TheTechromancer]

Addressed in #1022.