Enum RiskType 

#[non_exhaustive]
pub enum RiskType {
    ArbitraryFileUpload,
    BusinessLogicVulnerabilities,
    CodeInjection,
    CommandInjection,
    CrossSiteScripting,
    CryptographicVulnerabilities,
    DatabaseAccess,
    DatabaseModification,
    DefaultCredentials,
    DenialOfService,
    FileAccess,
    FileCreation,
    FileDeletion,
    GraphqlVulnerabilities,
    InformationDisclosure,
    InsecureDeserialization,
    InsecureDirectObjectReference,
    JsonWebTokenVulnerabilities,
    LocalFileInclusion,
    Other,
    OutboundServiceRequest,
    PathTraversal,
    PrivilegeEscalation,
    ServerSideRequestForgery,
    ServerSideTemplateInjection,
    SqlInjection,
    UnknownValue,
    XmlExternalEntity,
    Unknown(UnknownVariantValue),
}

When writing a match expression against RiskType, it is important to ensure your code is forward-compatible. That is, if a match arm handles a case for a feature that is supported by the service but has not been represented as an enum variant in a current version of SDK, your code should continue to work when you upgrade SDK to a future version in which the enum does include a variant for that feature.

Here is an example of how you can make a match expression forward-compatible:

# let risktype = unimplemented!();
match risktype {
    RiskType::ArbitraryFileUpload => { /* ... */ },
    RiskType::BusinessLogicVulnerabilities => { /* ... */ },
    RiskType::CodeInjection => { /* ... */ },
    RiskType::CommandInjection => { /* ... */ },
    RiskType::CrossSiteScripting => { /* ... */ },
    RiskType::CryptographicVulnerabilities => { /* ... */ },
    RiskType::DatabaseAccess => { /* ... */ },
    RiskType::DatabaseModification => { /* ... */ },
    RiskType::DefaultCredentials => { /* ... */ },
    RiskType::DenialOfService => { /* ... */ },
    RiskType::FileAccess => { /* ... */ },
    RiskType::FileCreation => { /* ... */ },
    RiskType::FileDeletion => { /* ... */ },
    RiskType::GraphqlVulnerabilities => { /* ... */ },
    RiskType::InformationDisclosure => { /* ... */ },
    RiskType::InsecureDeserialization => { /* ... */ },
    RiskType::InsecureDirectObjectReference => { /* ... */ },
    RiskType::JsonWebTokenVulnerabilities => { /* ... */ },
    RiskType::LocalFileInclusion => { /* ... */ },
    RiskType::Other => { /* ... */ },
    RiskType::OutboundServiceRequest => { /* ... */ },
    RiskType::PathTraversal => { /* ... */ },
    RiskType::PrivilegeEscalation => { /* ... */ },
    RiskType::ServerSideRequestForgery => { /* ... */ },
    RiskType::ServerSideTemplateInjection => { /* ... */ },
    RiskType::SqlInjection => { /* ... */ },
    RiskType::UnknownValue => { /* ... */ },
    RiskType::XmlExternalEntity => { /* ... */ },
    other @ _ if other.as_str() == "NewFeature" => { /* handles a case for `NewFeature` */ },
    _ => { /* ... */ },
}

The above code demonstrates that when risktype represents NewFeature, the execution path will lead to the second last match arm, even though the enum does not contain a variant RiskType::NewFeature in the current version of SDK. The reason is that the variable other, created by the @ operator, is bound to RiskType::Unknown(UnknownVariantValue("NewFeature".to_owned())) and calling as_str on it yields "NewFeature". This match expression is forward-compatible when executed with a newer version of SDK where the variant RiskType::NewFeature is defined. Specifically, when risktype represents NewFeature, the execution path will hit the second last match arm as before by virtue of calling as_str on RiskType::NewFeature also yielding "NewFeature".

Explicitly matching on the Unknown variant should be avoided for two reasons:

• The inner data UnknownVariantValue is opaque, and no further information can be extracted.
• It might inadvertently shadow other intended match arms.

Type of security risk

Note: RiskType::Unknown has been renamed to ::UnknownValue.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

ArbitraryFileUpload

Arbitrary file upload vulnerability

BusinessLogicVulnerabilities

Business logic vulnerability

CodeInjection

Code injection vulnerability

CommandInjection

Command injection vulnerability

CrossSiteScripting

Cross-site scripting vulnerability

CryptographicVulnerabilities

Cryptographic vulnerability

DatabaseAccess

Unauthorized database access

DatabaseModification

Unauthorized database modification

DefaultCredentials

Default or weak credentials detected

DenialOfService

Denial of service vulnerability

FileAccess

Unauthorized file access vulnerability

FileCreation

Unauthorized file creation vulnerability

FileDeletion

File deletion vulnerability

GraphqlVulnerabilities

GraphQL-specific vulnerability

InformationDisclosure

Information disclosure vulnerability

InsecureDeserialization

Insecure deserialization vulnerability

InsecureDirectObjectReference

Insecure direct object reference vulnerability

JsonWebTokenVulnerabilities

JSON Web Token vulnerability

LocalFileInclusion

Local file inclusion vulnerability

Other

Other risk type not covered by specific categories

OutboundServiceRequest

Outbound service request vulnerability

PathTraversal

Path traversal vulnerability

PrivilegeEscalation

Privilege escalation vulnerability

ServerSideRequestForgery

Server-side request forgery vulnerability

ServerSideTemplateInjection

Server-side template injection vulnerability

SqlInjection

SQL injection vulnerability

UnknownValue

Unknown risk type

Note: ::Unknown has been renamed to ::UnknownValue.

XmlExternalEntity

XML external entity vulnerability

Unknown(UnknownVariantValue)

👎Deprecated:

Don’t directly match on Unknown. See the docs on this enum for the correct way to handle unknown variants.

Unknown contains new variants that have been added since this code was generated.

Implementations

impl RiskType

pub fn as_str(&self) -> &str

Returns the &str value of the enum member.

pub const fn values() -> &'static [&'static str]

Returns all the &str representations of the enum members.

impl RiskType

pub fn try_parse(value: &str) -> Result<Self, UnknownVariantError>

Parses the enum value while disallowing unknown variants.

Unknown variants will result in an error.

Trait Implementations

impl AsRef<str> for RiskType

fn as_ref(&self) -> &str

Converts this type into a shared reference of the (usually inferred) input type.

impl Clone for RiskType

fn clone(&self) -> RiskType

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RiskType

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for RiskType

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<&str> for RiskType

fn from(s: &str) -> Self

Converts to this type from the input type.

impl FromStr for RiskType

type Err = Infallible

The associated error which can be returned from parsing.

fn from_str(s: &str) -> Result<Self, <Self as FromStr>::Err>

Parses a string s to return a value of this type.

impl Hash for RiskType

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for RiskType

fn cmp(&self, other: &RiskType) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for RiskType

fn eq(&self, other: &RiskType) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for RiskType

fn partial_cmp(&self, other: &RiskType) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Eq for RiskType

impl StructuralPartialEq for RiskType