[Update] feature

packages/backend/src/controller/csrfCheck.ts

@@ -148,7 +148,7 @@ export class CsrfCheck {
     sdk: SDK<DefineAPI<{}>, {}>,
     request: Request,
     response: Response
-  ): Promise<string | 0> {
+  ): Promise<void> {
     let result = ``;
 
     // 쿼리에 state 파라미터가 없으면 CSRF 위험
@@ -170,9 +170,12 @@ export class CsrfCheck {
     // }
 
     if (result) {
-      return result; // CSRF risk detected
-    } else {
-      return 0; // No CSRF risk detected
+      await sdk.findings.create({
+        title: "csrf vuln",
+        description: `SSO-related parameters detected in response:\n\n${request.getMethod()} ${request.getUrl()} : ${result}`,
+        request,
+        reporter: "csrf reporter",
+      });
     }
   }
 }