Struct SecurityPayload 

pub struct SecurityPayload {
    pub payload: String,
    pub category: SecurityCategory,
    pub description: String,
    pub high_risk: bool,
    pub location: PayloadLocation,
    pub header_name: Option<String>,
    pub group_id: Option<String>,
    pub inject_as_path: Option<bool>,
    pub form_encoded_body: Option<String>,
}

A security testing payload

Fields

payload: String

The payload string to inject

category: SecurityCategory

Category of the payload

description: String

Description of what this payload tests

high_risk: bool

Whether this is considered a high-risk payload

location: PayloadLocation

Where to inject the payload (uri, header, body)

header_name: Option<String>

Header name if location is Header (e.g., “User-Agent”, “Cookie”)

group_id: Option<String>

Group ID for multi-part payloads that must be sent together in one request (e.g., CRS test cases with URI + headers + body parts)

inject_as_path: Option<bool>

When true, URI payload replaces the request path instead of being appended as a query param. Used for CRS tests where the attack IS the path (e.g., 942101: POST /1234%20OR%201=1).

form_encoded_body: Option<String>

Raw form-encoded body string for sending as application/x-www-form-urlencoded. Used for CRS tests that send form-encoded data (e.g., 942432: var=;;dd foo bar).

Implementations

impl SecurityPayload

pub fn new( payload: String, category: SecurityCategory, description: String, ) -> Self

Create a new security payload

pub fn high_risk(self) -> Self

Mark as high risk

pub fn with_location(self, location: PayloadLocation) -> Self

Set the injection location

pub fn with_header_name(self, name: String) -> Self

Set header name for header payloads

pub fn with_group_id(self, group_id: String) -> Self

Set group ID for multi-part payloads that must be sent together

pub fn with_inject_as_path(self) -> Self

Mark this URI payload as path injection (replaces path instead of query param)

pub fn with_form_encoded_body(self, raw: String) -> Self

Set raw form-encoded body for application/x-www-form-urlencoded delivery

Trait Implementations

impl Clone for SecurityPayload

fn clone(&self) -> SecurityPayload

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityPayload

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SecurityPayload

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SecurityPayload

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.