MCPcopy Create free account
hub / github.com/akabe1/OAUTHScan / CustomScanIssue

Class CustomScanIssue

src/burp/BurpExtender.java:3944–4109  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

3942
3943// Class implementing IScanIssue
3944class CustomScanIssue implements IScanIssue
3945{
3946 private IHttpService httpService;
3947 private URL url;
3948 private IHttpRequestResponse[] httpMessages;
3949 private String name;
3950 private String detail;
3951 private String severity;
3952 private String confidence;
3953
3954 public CustomScanIssue(IHttpService httpService, URL url, IHttpRequestResponse[] httpMessages, String name, String detail, String severity, String confidence)
3955 {
3956 this.httpService = httpService;
3957 this.url = url;
3958 this.httpMessages = httpMessages;
3959 this.name = name;
3960 this.detail = detail;
3961 this.severity = severity;
3962 this.confidence = confidence;
3963 }
3964
3965 @Override
3966 public URL getUrl()
3967 {
3968 return url;
3969 }
3970
3971 @Override
3972 public String getIssueName()
3973 {
3974 return name;
3975 }
3976
3977 @Override
3978 public int getIssueType()
3979 {
3980 return 0;
3981 }
3982
3983 @Override
3984 public String getSeverity()
3985 {
3986 return severity;
3987 }
3988
3989 @Override
3990 public String getConfidence()
3991 {
3992 return confidence;
3993 }
3994
3995 @Override
3996 public String getIssueBackground()
3997 {
3998 return "OAUTHv2 is an open standard that allows applications to get access to protected "
3999 +"resources and APIs on behalf of users without accessing their credentials.\n "
4000 +"OAUTHv2 defines overarching schemas for granting authorization but does not describe how "
4001 +"to actually perform authentication.\nOpenID instead is an OAUTHv2 extension which strictly defines some "

Callers

nothing calls this directly

Calls

no outgoing calls

Tested by

no test coverage detected