fixed system that passed headers by reference causing overwrite

Author: esslushy

ThreadFixProApi/API.py

@@ -73,6 +73,7 @@ def request(self, method, url, params=None, files=None):
             if self.debug:
                 print(method + ' ' + self.host + url)
                 print(params)
+                print(self.headers)
 
             response = requests.request(method=method, url=self.host + url, params=params, files=files, headers=self.headers,
                                         timeout=self.timeout, verify=self.verify_ssl, cert=self.cert)
@@ -90,7 +91,7 @@ def request(self, method, url, params=None, files=None):
                 try:
                     response_code = json_response['responseCode']
                 except KeyError:
-                    response_code= response.status_code
+                    response_code = response.status_code
                 success = True if response_code >= 200 and response_code < 210 else False
                 try:
                     data = json_response['object']

ThreadFixProApi/ThreadFixProAPI.py

@@ -30,5 +30,5 @@ def __init__(self, host, api_key, verify_ssl=True, timeout=30, headers=None, use
         """
         super().__init__(host, api_key, verify_ssl, timeout, headers, user_agent, cert, debug)
         # Add on threadfix to application calls to make sure it can still work in a unified system as application endpoints are on /threadfix/{endpoint}
-        self.Applications = ThreadFixProAPIApplications(self.host + '/threadfix', api_key, verify_ssl, timeout, self.headers, self.user_agent, cert, debug)
-        self.Networks = ThreadFixProAPINetworks(self.host, api_key, verify_ssl, timeout, self.headers, self.user_agent, cert, debug)
+        self.Applications = ThreadFixProAPIApplications(self.host + '/threadfix', api_key, verify_ssl, timeout, headers, user_agent, cert, debug)
+        self.Networks = ThreadFixProAPINetworks(self.host, api_key, verify_ssl, timeout, headers, user_agent, cert, debug)

tests/tests.py

@@ -21,6 +21,8 @@ def network_test(threadfix, apikey):
     network_api = ThreadFixProAPINetworks(threadfix, apikey, verify_ssl=False)
     ret = network_api.VulnerabilitiesAPI.fetch_all_vulnerabilities()
     print(ret.data)
+    ret2 = network_api.VulnerabilitiesAPI.fetch_all_vulnerabilities(href=ret.data['_links']['next']['href'])
+    print(ret2.data)
 
 network_test('https://demo.tfint.link', 'cKj2ZmbZkZoXMML5KwAlkwHN9CQDYU38ch9fBFUYPF0')