CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-08-04 14:55:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Minor bug fix for --openapi

Browse source
This commit is contained in:
Miroslav Štampar 2026-07-28 14:39:44 +02:00
parent 84f0ef8232
commit f992e44fb5
3 changed files with 14 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
tests/test_openapi.py
View file

@ -116,6 +116,14 @@ class TestOpenApi(unittest.TestCase):
"paths": {"/p": {"get": {}}}}
self.assertEqual(_targets(spec, None)[0][0], "https://prod.x.io/v3/p")
def test_server_variable_enum_without_default(self):
# a server variable that declares an 'enum' but omits the (spec-required) 'default' must use a
# declared enum value, not a placeholder host - else the target is https://1/... (unscannable)
spec = {"openapi": "3.0.0", "servers": [{"url": "https://{h}/v1",
"variables": {"h": {"enum": ["real.com"]}}}],
"paths": {"/x": {"get": {}}}}
self.assertEqual(_targets(spec, None)[0][0], "https://real.com/v1/x")
def test_headers_are_hashable_tuples(self):
# kb.targets is an OrderedSet, so the emitted headers must be hashable (tuple, not list)
spec = {"openapi": "3.0.0", "paths": {"/x": {"get": {"parameters": [