Struct MassAssignmentScanner 

pub struct MassAssignmentScanner;

Detects potential mass-assignment vulnerabilities by injecting privileged fields.

How It Works

1. Baseline GET captures currently elevated sensitive fields.
2. Active probe sends POST with privileged fields.
3. Confirmation GET checks whether reflected fields persisted as newly elevated state.

Findings

• mass_assignment/reflected-fields (MEDIUM): privileged fields reflected in response.
• mass_assignment/persisted-state-change (HIGH): reflected fields also persisted in state.
• mass_assignment/dry-run (INFO): scanner configured to report planned probe only.

Implementations

impl MassAssignmentScanner

pub fn new(_config: &Config) -> Self

Trait Implementations

impl Scanner for MassAssignmentScanner

fn name(&self) -> &'static str

Stable scanner identifier used for logging, metrics, and reporting.

fn scan<'life0, 'life1, 'life2, 'life3, 'async_trait>( &'life0 self, url: &'life1 str, client: &'life2 HttpClient, config: &'life3 Config, ) -> Pin<Box<dyn Future<Output = (Vec<Finding>, Vec<CapturedError>)> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait, 'life3: 'async_trait,

Run this scanner against a single URL.