Fix #112 Multiple redirections detection

spec/lib/wpscan/modules/web_site_spec.rb

@@ -112,12 +112,29 @@ shared_examples_for "WebSite" do
 
     [301, 302].each do |status_code|
       it "should return http://new-location.com if the status code is #{status_code}" do
+        new_location = "http://new-location.com"
+
         stub_request(:get, web_site.url).
-          to_return(:status => status_code, :headers => {:location => "http://new-location.com"})
+          to_return(:status => status_code, :headers => { :location => new_location })
+
+        stub_request(:get, new_location).to_return(:status => 200)
 
         web_site.redirection.should === "http://new-location.com"
       end
     end
+
+    context "when multiple redirections" do
+      it "should return the last redirection" do
+        first_redirection = "www.redirection.com"
+        last_redirection   = "redirection.com"
+
+        stub_request(:get, web_site.url).to_return(:status => 301, :headers => { :location => first_redirection })
+        stub_request(:get, first_redirection).to_return(:status => 302, :headers => { :location => last_redirection })
+        stub_request(:get, last_redirection).to_return(:status => 200)
+
+        web_site.redirection.should === last_redirection
+      end
+    end
   end
 
   describe "#page_hash" do

spec/lib/wpscan/wp_target_spec.rb

@@ -77,7 +77,8 @@ describe WpTarget do
     it "should return the redirection url if there is one (ie: for https)" do
       https_login_url = login_url.gsub(/^http:/, "https:")
 
-      stub_request(:get, login_url).to_return(:status => 302, :headers => {:location => https_login_url})
+      stub_request(:get, login_url).to_return(:status => 302, :headers => { :location => https_login_url })
+      stub_request(:get, https_login_url).to_return(:status => 200)
 
       @wp_target.login_url.should === https_login_url
     end