Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
1
Merge Requests
1
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
nexedi
gitlab-ce
Commits
545ec5a8
Commit
545ec5a8
authored
Feb 08, 2021
by
Michał Zając
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Indent raw_metadata hash
parent
9dbf6fbe
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
97 additions
and
17 deletions
+97
-17
ee/spec/migrations/remove_duplicated_cs_findings_without_vulnerability_id_spec.rb
...e_duplicated_cs_findings_without_vulnerability_id_spec.rb
+97
-17
No files found.
ee/spec/migrations/remove_duplicated_cs_findings_without_vulnerability_id_spec.rb
View file @
545ec5a8
...
...
@@ -118,23 +118,103 @@ RSpec.describe RemoveDuplicatedCsFindingsWithoutVulnerabilityId, :migration do
end
def
raw_metadata
{
"description"
=>
"The cipher does not provide data integrity update 1"
,
"message"
=>
"The cipher does not provide data integrity"
,
"cve"
=>
"818bf5dacb291e15d9e6dc3c5ac32178:CIPHER"
,
"solution"
=>
"GCM mode introduces an HMAC into the resulting encrypted data, providing integrity of the result."
,
"location"
=>
{
"file"
=>
"maven/src/main/java/com/gitlab/security_products/tests/App.java"
,
"start_line"
=>
29
,
"end_line"
=>
29
,
"class"
=>
"com.gitlab.security_products.tests.App"
,
"method"
=>
"insecureCypher"
},
"links"
=>
[{
"name"
=>
"Cipher does not check for integrity first?"
,
"url"
=>
"https://crypto.stackexchange.com/questions/31428/pbewithmd5anddes-cipher-does-not-check-for-integrity-first"
}],
"assets"
=>
[{
"type"
=>
"postman"
,
"name"
=>
"Test Postman Collection"
,
"url"
=>
"http://localhost/test.collection"
}],
"evidence"
=>
{
"summary"
=>
"Credit card detected"
,
"request"
=>
{
"headers"
=>
[{
"name"
=>
"Accept"
,
"value"
=>
"*/*"
}],
"method"
=>
"GET"
,
"url"
=>
"http://goat:8080/WebGoat/logout"
,
"body"
=>
nil
},
"response"
=>
{
"headers"
=>
[{
"name"
=>
"Content-Length"
,
"value"
=>
"0"
}],
"reason_phrase"
=>
"OK"
,
"status_code"
=>
200
,
"body"
=>
nil
},
"source"
=>
{
"id"
=>
"assert:Response Body Analysis"
,
"name"
=>
"Response Body Analysis"
,
"url"
=>
"htpp://hostname/documentation"
},
"supporting_messages"
=>
[{
"name"
=>
"Origional"
,
"request"
=>
{
"headers"
=>
[{
"name"
=>
"Accept"
,
"value"
=>
"*/*"
}],
"method"
=>
"GET"
,
"url"
=>
"http://goat:8080/WebGoat/logout"
,
"body"
=>
""
}
},
{
"name"
=>
"Recorded"
,
"request"
=>
{
"headers"
=>
[{
"name"
=>
"Accept"
,
"value"
=>
"*/*"
}],
"method"
=>
"GET"
,
"url"
=>
"http://goat:8080/WebGoat/logout"
,
"body"
=>
""
},
"response"
=>
{
"headers"
=>
[{
"name"
=>
"Content-Length"
,
"value"
=>
"0"
}],
"reason_phrase"
=>
"OK"
,
"status_code"
=>
200
,
"body"
=>
""
}
}]
}
}
{
"description"
=>
"The cipher does not provide data integrity update 1"
,
"message"
=>
"The cipher does not provide data integrity"
,
"cve"
=>
"818bf5dacb291e15d9e6dc3c5ac32178:CIPHER"
,
"solution"
=>
"GCM mode introduces an HMAC into the resulting encrypted data, providing integrity of the result."
,
"location"
=>
{
"file"
=>
"maven/src/main/java/com/gitlab/security_products/tests/App.java"
,
"start_line"
=>
29
,
"end_line"
=>
29
,
"class"
=>
"com.gitlab.security_products.tests.App"
,
"method"
=>
"insecureCypher"
},
"links"
=>
[
{
"name"
=>
"Cipher does not check for integrity first?"
,
"url"
=>
"https://crypto.stackexchange.com/questions/31428/pbewithmd5anddes-cipher-does-not-check-for-integrity-first"
}
],
"assets"
=>
[
{
"type"
=>
"postman"
,
"name"
=>
"Test Postman Collection"
,
"url"
=>
"http://localhost/test.collection"
}
],
"evidence"
=>
{
"summary"
=>
"Credit card detected"
,
"request"
=>
{
"method"
=>
"GET"
,
"url"
=>
"http://goat:8080/WebGoat/logout"
,
"body"
=>
nil
,
"headers"
=>
[
{
"name"
=>
"Accept"
,
"value"
=>
"*/*"
}
]
},
"response"
=>
{
"reason_phrase"
=>
"OK"
,
"status_code"
=>
200
,
"body"
=>
nil
,
"headers"
=>
[
{
"name"
=>
"Content-Length"
,
"value"
=>
"0"
}
]
},
"source"
=>
{
"id"
=>
"assert:Response Body Analysis"
,
"name"
=>
"Response Body Analysis"
,
"url"
=>
"htpp://hostname/documentation"
},
"supporting_messages"
=>
[
{
"name"
=>
"Origional"
,
"request"
=>
{
"method"
=>
"GET"
,
"url"
=>
"http://goat:8080/WebGoat/logout"
,
"body"
=>
""
,
"headers"
=>
[
{
"name"
=>
"Accept"
,
"value"
=>
"*/*"
}
]
}
},
{
"name"
=>
"Recorded"
,
"request"
=>
{
"method"
=>
"GET"
,
"url"
=>
"http://goat:8080/WebGoat/logout"
,
"body"
=>
""
,
"headers"
=>
[
{
"name"
=>
"Accept"
,
"value"
=>
"*/*"
}
]
},
"response"
=>
{
"reason_phrase"
=>
"OK"
,
"status_code"
=>
200
,
"body"
=>
""
,
"headers"
=>
[
{
"name"
=>
"Content-Length"
,
"value"
=>
"0"
}
]
}
}
]
}
}
end
def
create_identifier
(
number_of
)
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment