google_api_web_security_scanner v0.10.0 GoogleApi.WebSecurityScanner.V1alpha.Model.Finding View Source

A Finding resource represents a vulnerability instance identified during a ScanRun.

Attributes

body (type: String.t, default: nil) - The body of the request that triggered the vulnerability.
description (type: String.t, default: nil) - The description of the vulnerability.
finalUrl (type: String.t, default: nil) - The URL where the browser lands when the vulnerability is detected.
findingType (type: String.t, default: nil) - The type of the Finding.
frameUrl (type: String.t, default: nil) - If the vulnerability was originated from nested IFrame, the immediate parent IFrame is reported.
fuzzedUrl (type: String.t, default: nil) - The URL produced by the server-side fuzzer and used in the request that triggered the vulnerability.
httpMethod (type: String.t, default: nil) - The http method of the request that triggered the vulnerability, in uppercase.
name (type: String.t, default: nil) - The resource name of the Finding. The name follows the format of 'projects/{projectId}/scanConfigs/{scanConfigId}/scanruns/{scanRunId}/findings/{findingId}'. The finding IDs are generated by the system.
outdatedLibrary (type: GoogleApi.WebSecurityScanner.V1alpha.Model.OutdatedLibrary.t, default: nil) - An addon containing information about outdated libraries.
reproductionUrl (type: String.t, default: nil) - The URL containing human-readable payload that user can leverage to reproduce the vulnerability.
trackingId (type: String.t, default: nil) - The tracking ID uniquely identifies a vulnerability instance across multiple ScanRuns.
violatingResource (type: GoogleApi.WebSecurityScanner.V1alpha.Model.ViolatingResource.t, default: nil) - An addon containing detailed information regarding any resource causing the vulnerability such as JavaScript sources, image, audio files, etc.
vulnerableHeaders (type: GoogleApi.WebSecurityScanner.V1alpha.Model.VulnerableHeaders.t, default: nil) - An addon containing information about vulnerable or missing HTTP headers.
vulnerableParameters (type: GoogleApi.WebSecurityScanner.V1alpha.Model.VulnerableParameters.t, default: nil) - An addon containing information about request parameters which were found to be vulnerable.
xss (type: GoogleApi.WebSecurityScanner.V1alpha.Model.Xss.t, default: nil) - An addon containing information reported for an XSS, if any.

Link to this section Summary

Types

t()

Functions

decode(value, options)

Unwrap a decoded JSON object into its complex fields.

Link to this section Types

t()

t() :: %GoogleApi.WebSecurityScanner.V1alpha.Model.Finding{
  body: String.t(),
  description: String.t(),
  finalUrl: String.t(),
  findingType: String.t(),
  frameUrl: String.t(),
  fuzzedUrl: String.t(),
  httpMethod: String.t(),
  name: String.t(),
  outdatedLibrary:
    GoogleApi.WebSecurityScanner.V1alpha.Model.OutdatedLibrary.t(),
  reproductionUrl: String.t(),
  trackingId: String.t(),
  violatingResource:
    GoogleApi.WebSecurityScanner.V1alpha.Model.ViolatingResource.t(),
  vulnerableHeaders:
    GoogleApi.WebSecurityScanner.V1alpha.Model.VulnerableHeaders.t(),
  vulnerableParameters:
    GoogleApi.WebSecurityScanner.V1alpha.Model.VulnerableParameters.t(),
  xss: GoogleApi.WebSecurityScanner.V1alpha.Model.Xss.t()
}

Link to this section Functions

decode(value, options)

decode(struct(), keyword()) :: struct()

Unwrap a decoded JSON object into its complex fields.