Function TestFormatJSON

pkg/output/json_test.go:16–86

(t *testing.T)

)

func TestFormatJSON(t *testing.T) {
	tests := []struct {
		name  string
		input output.ResultData
		want  string
	}{
		{name: "no error",
			input: output.ResultData{
				TargetURL: "https://edoardottt.github.io/pp-test",
				ScanURL: "https://edoardottt.github.io/pp-test?constructor.prototype.oigczu=oigczu" +
					"&__proto__[oigczu]=oigczu&constructor[prototype][oigczu]=oigczu&__proto__.oigczu=oigczu" +
					"&__proto__.oigczu=1|2|3&__proto__[oigczu]={\"json\":\"value\"}#__proto__[oigczu]=oigczu",
				JSEvaluation: "oigczu",
				ScanError:    "",
			},
			want: `{"TargetURL":"https://edoardottt.github.io/pp-test",` +
				`"ScanURL":"https://edoardottt.github.io/pp-test?constructor.prototype.oigczu=oigczu&__proto__` +
				`[oigczu]=oigczu&constructor[prototype][oigczu]=oigczu&__proto__.oigczu=oigczu&__proto__.` +
				`oigczu=1|2|3&__proto__[oigczu]={\"json\":\"value\"}#__proto__[oigczu]=oigczu",` +
				`"JSEvaluation":"oigczu"}`,
		},
		{name: "error",
			input: output.ResultData{
				TargetURL: "https://edoardottt.github.io/pp-tes",
				ScanURL: "https://edoardottt.github.io/pp-tes?constructor.prototype.sqtiwx=sqtiwx" +
					"&__proto__[sqtiwx]=sqtiwx&constructor[prototype][sqtiwx]=sqtiwx&__proto__.sqtiwx=sqtiwx" +
					"&__proto__.sqtiwx=1|2|3&__proto__[sqtiwx]={\"json\":\"value\"}#__proto__[sqtiwx]=sqtiwx",
				JSEvaluation: "",
				ScanError:    "encountered an undefined value",
			},
			want: `{"TargetURL":"https://edoardottt.github.io/pp-tes",` +
				`"ScanURL":"https://edoardottt.github.io/pp-tes?constructor.prototype.sqtiwx=sqtiwx&__proto__[sqtiwx]` +
				`=sqtiwx&constructor[prototype][sqtiwx]=sqtiwx&__proto__.sqtiwx=sqtiwx&__proto__.` +
				`sqtiwx=1|2|3&__proto__[sqtiwx]={\"json\":\"value\"}#__proto__[sqtiwx]=` +
				`sqtiwx","ScanError":"encountered an undefined value"}`,
		},
		{name: "exploit",
			input: output.ResultData{
				TargetURL: "https://edoardottt.github.io/pp-test",
				ScanURL: "https://edoardottt.github.io/pp-test?constructor.prototype.lfhfqn=lfhfqn" +
					"&__proto__[lfhfqn]=lfhfqn&constructor[prototype][lfhfqn]=lfhfqn&__proto__.lfhfqn=lfhfqn" +
					"&__proto__.lfhfqn=1|2|3&__proto__[lfhfqn]={\"json\":\"value\"}#__proto__[lfhfqn]=lfhfqn",
				JSEvaluation: "lfhfqn",
				Fingerprint:  []string{"jQuery"},
				ExploitURLs: []string{"https://edoardottt.github.io/pp-test/?__proto__[url][]=data:,alert(1337)//" +
					"&__proto__[dataType]=script",
					"https://edoardottt.github.io/pp-test/?__proto__[context]=%3Cimg/src/onerror%3dalert(1337)" +
						"%3E&__proto__[jquery]=x"},
				ScanError:  "",
				References: []string{"https://github.com/BlackFan/client-side-prototype-pollution/blob/master/gadgets/jquery.md"},
			},
			want: `{"TargetURL":"https://edoardottt.github.io/pp-test",` +
				`"ScanURL":"https://edoardottt.github.io/pp-test?constructor.prototype.lfhfqn=lfhfqn` +
				`&__proto__[lfhfqn]=lfhfqn&constructor[prototype][lfhfqn]=lfhfqn&__proto__.lfhfqn=lfhfqn` +
				`&__proto__.lfhfqn=1|2|3&__proto__[lfhfqn]={\"json\":\"value\"}#__proto__[lfhfqn]=lfhfqn",` +
				`"JSEvaluation":"lfhfqn",` +
				`"Fingerprint":["jQuery"],` +
				`"ExploitURLs":["https://edoardottt.github.io/pp-test/?__proto__[url][]=data:,alert(1337)//` +