search

cr0hn / golismero-legacy

THIS IS A LEGACY VERSION PRESERVED FOR BACKUP, DO NOT USE
http://golismero-project.com
15 stars 4 forks source link

Distinguish target data from regular data #202

Open MarioVilas opened 10 years ago

MarioVilas commented 10 years ago

Allow plugins to mark with a metadata flag that they only want data that was explicitly passed by the user as a target, instead of processing all data of the same type.

This would allow some plugins (especially external tool plugins) to run only against the targets specifically selected by the user, disabling the feedback loop.

It implies we need to mark data as being a target, somehow. This mark may be set by the Scope object when providing targets to new audits. The tricky part is, the mark shouldn't be in the object itself, but rather in the database (like plugin history and stage history is).

MarioVilas commented 10 years ago

Another way of implementing this is to explicitly call the marked plugins at the beginning of each corresponding stage, against the Data objects returned by the AuditScope.get_targets() method, and after that calling the rest of the objects. Not sure if this is better or not, I'd have to try coding a bit to see how much has to be modified and the impact in the code complexity.