Merge pull request #210 from AikidoSec/patch-ignore-options-head

Ignore OPTIONS and HEAD for routes

Author: willem-delbare

library/agent/Agent.test.ts

@@ -512,9 +512,11 @@ t.test("it sends hostnames and routes along with heartbeat", async () => {
   agent.onConnectHostname("aikido.dev", 80);
   agent.onConnectHostname("google.com", 443);
   agent.onRouteExecute("POST", "/posts/:id");
+  agent.onRouteExecute("OPTIONS", "/posts/:id");
   agent.onRouteExecute("POST", "/posts/:id");
   agent.onRouteExecute("GET", "/posts/:id");
   agent.onRouteExecute("GET", "/");
+  agent.onRouteExecute("HEAD", "/");
 
   api.clear();
 

library/agent/Agent.ts

@@ -403,6 +403,12 @@ export class Agent {
   }
 
   onRouteExecute(method: string, path: string) {
+    const excludedMethods = ["OPTIONS", "HEAD"];
+
+    if (excludedMethods.includes(method)) {
+      return;
+    }
+
     this.routes.addRoute(method, path);
   }