After reviewing and Debugging the source of webinspect.pl,
i found that the httppost_xml function is completely useless.
The Line:
$request = new HTTP::Request('POST' => "$case{url}" );
creates a broken http request without "HTTP/1.1".
Furthermore, the httpauth parameter from the config are completely ignored. I do not know why, since they are parsed correctly and
stored in useragent->credentials. But in the httppost_xml function, the "if ($case{addheader})" skips all authentication information.
It seems the content of $case{addheader} is not filled or messed up.
As a result, one gets a http request like:
POST https://www.my.url.org
Content-Type: text/xml
<?xml version="1.0" encoding="UTF-8"?>
<request>
<requests/>
</request>
As you can see, HTTP/1.1 is missing and authentication credentials are completely ignored.
Attached is my webinspect.pl with some debug printouts.