You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Create an OpenAPI spec with missing schema properties (or use mine: MyBackend.zip)
Run the analysis with cherrybomb --file MyBackend.json --profile passive.
Observe how the analysis fails with the error mentioned above.
Expected behavior
I would expect a warning for this parameter that indicates a missing schema.
Desktop:
OS: Ubuntu 22.04.2 LTS
Version 1.0.0
Additional context
I understand that arbitrarily missing fields aren't necessarily suitable for emitting warnings. However, this particular example was generated by Swagger/Swashbuckle and is reported as valid by other tools.
The text was updated successfully, but these errors were encountered:
For now, most of our checks which rely on parameter based analysis, require schema as a prerequisite in order to preform them.
For the newer version(which is coming soon), I will add an adaptive way to determine whether or not a check should be preformed on each parameter.
Describe the bug
When analyzing an OAS JSON file that has parameters which are missing a schema, the application crashes with the following error:
Example parameter:
To fix the crash, the parameter can be changed as follows:
To Reproduce
cherrybomb --file MyBackend.json --profile passive
.Expected behavior
I would expect a warning for this parameter that indicates a missing schema.
Desktop:
Additional context
I understand that arbitrarily missing fields aren't necessarily suitable for emitting warnings. However, this particular example was generated by Swagger/Swashbuckle and is reported as valid by other tools.
The text was updated successfully, but these errors were encountered: