Make_list_unique( "/", http_cgi_dirs() )

Vulnerability Tests
1

Hi, I think that http_cgi_dirs() always contains the “/” root directory, why so many VTs call make_list_unique() like this:

foreach location( make_list_unique( "/", http_cgi_dirs( port: 80 ) ) ) {
...
}
1 Like
2

AFAIK there is no real reason for this besides maybe historical ones (In the past http_cgi_dirs() might not have behaved like currently implemented).

But as there is no drawback having / included or not included there i wouldn’t care much about that.

1 Like
3

Oh, I think that make_list_unique() itself consumes resources.