search

OWASP-Benchmark / BenchmarkUtils

OWASP Benchmark Project Utilities - Provides scorecard generation and crawling tools for Benchmark style test suites.
https://owasp.org/www-project-benchmark/
GNU General Public License v3.0
15 stars 49 forks source link

Add <unverifiable> attribute to sinks #8

Closed davewichers closed 3 years ago

davewichers commented 3 years ago

Add this attribute to indicate a sink is unverifiable. The 'value' of this attribute should be the rationale why this sink can't be verified automatically. This unverifiable attribute needs to be carried forward to wherever the attackSuccessIndicator values are carried forward so you always know when you have one or the other. When BOTH are missing, that's a problem that should be reported during the verification crawl.

davewichers commented 3 years ago

Fixed per merged Pull request.