AppThreat / AppThreat/atom-tools

Process additional data contained in resolved methods

Open
#17 1 comment 0 reactions 1 assignee Claimed by @cerrussell View on GitHub
enhancement
Dominant language
Python
Stars
6
Forks
3
Avg merge
4d
Merged PRs (30d)
2

Description

We can sometimes get media types, responses, headers, body, etc. within resolved methods.

### Examples
#### Java
`"@RequestMapping(value = \"/vuln/emptyReferer\", produces = \"application/javascript\")"`

`"@RequestMapping(method = RequestMethod.POST, value = \"/uaa/users\", consumes = MediaType.APPLICATION_JSON_UTF8_VALUE)"`
#### Javascript/Typescript
`"app.use(functionjsonParser(req:Request,res:Response,next:NextFunction){\r//@ts-expect-errorFIXMEintentionallysavingoriginalrequestinthisproperty\rreq.rawBody=req.body\rif(req.headers['content-type']?.includes('application/json')){\rif(!req.body){\rreq.body={}\r}\rif(req.body!==Object(req.body)){//Expensiveworkaroundfor500errorsduringFrisbytestrun(see#640)\rreq.body=JSON.parse(req.body)\r}\r}\rnext()\r})",`

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.