search

we45 / ThreatPlaybook

A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestration
https://threatplaybook.io
271 stars 55 forks source link

Playbook UI showing XSS testcase in SQL reference. #39

Open mandeepdhiman123 opened 4 years ago

mandeepdhiman123 commented 4 years ago

Hi @abhaybhargav. I have completed the setup as per the process and working with default configurations. But somehow, Playbook UI showing XSS related issues in the story of SQL injection. It seems like all the threat scenarios defined under one abuse case referring to the test case of the last defined Threat scenario. Feature file has "reference: {name: sql_injection, severity: 3}" but UI showing test case for XSS which is the last reference in the feature file for threat scenario. Screenshots attached. feature_file Playbook-Frontend

abhaybhargav commented 4 years ago

Hi @mandeepdhiman123 Ill get to this next week and check it out. Thanks