[Update] feature
This commit is contained in:
parent
f775282e91
commit
ef1d8f40b3
7 changed files with 464 additions and 36 deletions
|
|
@ -25,20 +25,7 @@ export function init(sdk: SDK<API>) {
|
|||
|
||||
sdk.events.onInterceptResponse(
|
||||
async (sdk: SDK<DefineAPI<{}>, {}>, req: Request, resp: Response) => {
|
||||
const funcList: Promise<string | 0>[] = [
|
||||
csrfCheck.checker(sdk, req, resp),
|
||||
];
|
||||
|
||||
let result = await Promise.all(funcList);
|
||||
if (result) {
|
||||
await sdk.findings.create({
|
||||
title: "Possible SSO Response Detected",
|
||||
description: `SSO-related parameters detected in response:\n\n${req.getMethod()} ${req.getUrl()} : ${result}`,
|
||||
request: req,
|
||||
reporter: "",
|
||||
});
|
||||
}
|
||||
|
||||
await csrfCheck.checker(sdk, req, resp);
|
||||
await pkceCheck.test(sdk, req);
|
||||
}
|
||||
);
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue