Struct SecurityProbeStat 

pub struct SecurityProbeStat {
    pub injection: String,
    pub accepted: usize,
    pub blocked: usize,
    pub errored: usize,
}

Round 59 (#79) — per-injection-type tally of OWASP probes. Srikanth on 0.3.206 was testing a WAF (waaptest.net targets): “owasp: 0 caught / 8127 missed” but “Definite issues: none”, and asked whether real issues were being hidden. They are not hidden from the CONTRACT view (an SQLi string in a string field is spec-valid, so it is correctly not a schema violation), but for a WAF each ACCEPTED injection payload is one it did not block. This surfaces that count so a security tester sees it without eyeballing rows.

Fields

injection: String

Injection family, e.g. sqli, xss, command-injection.

accepted: usize

Probes the target let through (status < 400): for a WAF, NOT blocked.

blocked: usize

Probes the target blocked with a 4xx.

errored: usize

Probes that made the target return a 5xx (also a Definite issue).

Trait Implementations

impl Clone for SecurityProbeStat

fn clone(&self) -> SecurityProbeStat

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityProbeStat

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for SecurityProbeStat

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.