secfinding 0.3.0

Universal security finding types for vulnerability scanners.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

use secfinding::Evidence;

#[test]
fn serde_tagged() {
    let ev = Evidence::HttpResponse {
        status: 200,
        headers: vec![("Server".into(), "nginx".into())],
        body_excerpt: Some("test".into()),
    };
    let json = serde_json::to_string(&ev).unwrap();
    assert!(json.contains("http_response"));
    assert!(json.contains("nginx"));
}

#[test]
fn display_formatting() {
    let ev = Evidence::http_status(404).unwrap();
    assert_eq!(
        ev.to_string(),
        "http-response status=404 headers=0 body_excerpt=none"
    );
}