Documentation
¶
Index ¶
Constants ¶
View Source
const ( ModuleID = "input-reflection-detect" ModuleName = "Input Reflection Detect" ModuleShort = "Detects request parameter values reflected in responses" )
Variables ¶
View Source
var ( ModuleDesc = `` /* 656-byte string literal not displayed */ ModuleConfirmation = "Indicated when a request parameter value appears verbatim in the response body" ModuleSeverity = severity.Info ModuleConfidence = severity.Tentative ModuleTags = []string{"xss", "injection", "light"} )
Functions ¶
This section is empty.
Types ¶
type Module ¶
type Module struct {
modkit.BasePassiveModule
// contains filtered or unexported fields
}
Module implements the Input Reflection Detect passive scanner.
func (*Module) ScanPerRequest ¶
func (m *Module) ScanPerRequest(ctx *httpmsg.HttpRequestResponse, scanCtx *modkit.ScanContext) ([]*output.ResultEvent, error)
ScanPerRequest checks if request parameter values are reflected in the response.
Click to show internal directories.
Click to hide internal directories.