--screenshot-filter option

cmd/scan.go

@@ -149,6 +149,7 @@ func init() {
 	scanCmd.PersistentFlags().BoolVar(&opts.Scan.SaveContent, "save-content", false, "Save content from network requests to the configured writers. WARNING: This flag has the potential to make your storage explode in size")
 	scanCmd.PersistentFlags().BoolVar(&opts.Scan.SkipHTML, "skip-html", false, "Don't include the first request's HTML response when writing results")
 	scanCmd.PersistentFlags().BoolVar(&opts.Scan.ScreenshotToWriter, "write-screenshots", false, "Store screenshots with writers in addition to filesystem storage")
+	scanCmd.PersistentFlags().IntSliceVar(&opts.Scan.HttpCodeFilter, "http-code-filter", []int{}, "Http response codes to screenshot. this is a filter (by default all codes are screenshotted)")
 
 	// Chrome options
 	scanCmd.PersistentFlags().StringVar(&opts.Chrome.Path, "chrome-path", "", "The path to a Google Chrome binary to use (downloads a platform-appropriate binary by default)")

pkg/runner/drivers/chromedp.go

@@ -349,6 +349,13 @@ func (run *Chromedp) Witness(target string, thisRunner *runner.Runner) (*models.
 		time.Sleep(time.Duration(run.options.Scan.Delay) * time.Second)
 	}
 
+	// check if the preflight returned a code to process.
+	// an empty slice implies no filtering
+	if (len(run.options.Scan.HttpCodeFilter) > 0) &&
+		!islazy.SliceHasInt(run.options.Scan.HttpCodeFilter, result.ResponseCode) {
+		return nil, fmt.Errorf("received HTTP status code (%d), which is not among the allowed screenshot response codes.", result.ResponseCode)
+	}
+
 	// run any javascript we have
 	if run.options.Scan.JavaScript != "" {
 		if err := chromedp.Run(navigationCtx, chromedp.Evaluate(run.options.Scan.JavaScript, nil)); err != nil {

pkg/runner/drivers/go-rod.go

@@ -336,6 +336,13 @@ func (run *Gorod) Witness(target string, runner *runner.Runner) (*models.Result,
 		time.Sleep(time.Duration(run.options.Scan.Delay) * time.Second)
 	}
 
+	// check if the preflight returned a code to process.
+	// an empty slice implies no filtering
+	if (len(run.options.Scan.HttpCodeFilter) > 0) &&
+		!islazy.SliceHasInt(run.options.Scan.HttpCodeFilter, result.ResponseCode) {
+		return nil, fmt.Errorf("received HTTP status code (%d), which is not among the allowed screenshot response codes.", result.ResponseCode)
+	}
+
 	// run any javascript we have
 	if run.options.Scan.JavaScript != "" {
 		_, err := page.Eval(run.options.Scan.JavaScript)

pkg/runner/options.go

@@ -89,6 +89,9 @@ type Scan struct {
 	// Save content stores content from network requests (warning) this
 	// could make written artefacts huge
 	SaveContent bool
+	// HttpCodeFilter are http response codes to screenshot. this is a filter. 
+	// by default all codes are screenshotted
+	HttpCodeFilter []int
 }
 
 // NewDefaultOptions returns Options with some default values
@@ -105,6 +108,7 @@ func NewDefaultOptions() *Options {
 			Timeout:          60,
 			UriFilter:        []string{"http", "https"},
 			ScreenshotFormat: "jpeg",
+			HttpCodeFilter:  []int{},
 		},
 		Logging: Logging{
 			Debug:         true,