(domain: str)
| 571 | evidence=f"{hit['url']} (status={hit['status']}, length={hit['length']})", |
| 572 | remediation="Remove the path from production or restrict access.", |
| 573 | matched_at=hit["url"], |
| 574 | )) |
| 575 | |
| 576 | result.findings = findings |
| 577 | result.artifacts = {"base_url": base_url, "hits": hits, "wordlist": wordlist} |
| 578 | result.status = "ok" |
| 579 | result.duration_seconds = time.monotonic() - started |
| 580 | return result |
| 581 | |
| 582 | def assert_handoff_scope( |
| 583 | self, |
| 584 | scan_id: str, |
| 585 | subdomains: List[str], |
| 586 | force: bool = False, |
| 587 | ) -> List[str]: |
| 588 | """Return any subdomains that violate registrable-domain scope. Empty list = ok.""" |
| 589 | state = self.get_scan_state(scan_id) |
| 590 | if not state: |
| 591 | return list(subdomains) |
no test coverage detected