C# Class Kentico.KInspector.Modules.VulnerabilityAnalyzerModule

When adding support for new Kentico version, .txt file with default instance files must be added and the version recognition has to be slightly improved to work with minor versions.
Inheritance: IModule
Afficher le fichier Open project: Kentico/KInspector

Méthodes publiques

Méthode Description
GetModuleMetadata ( ) : Kentico.KInspector.Core.ModuleMetadata
GetResults ( IInstanceInfo instanceInfo ) : ModuleResults

Private Methods

Méthode Description
AnalyzeSqlInjection ( string line, string &sqlInjectionResult, string &potentialSqlInjectionResult ) : void

Analyses string for presence of SQL injection or potential SQL injection.
AnalyzeVulnerabilities ( DirectoryInfo pathToKenticoInstance, IEnumerable filesWithinInstance, VulnerabilityAnalysisResults &results ) : void

Analyses code files for presence of security vulnerabilities.
AnalyzeVulnerabilities ( DirectoryInfo pathToKenticoInstance, string fileWithinInstance, VulnerabilityAnalysisResults &results ) : void

Analyses code file for presence of security vulnerabilities.
AnalyzeXss ( string line, string &xssResult ) : void

Analyses string for presence of XSS vulnerability.
ContainsSqlSyntax ( string str ) : bool

Tells you whether str contains SQL syntax by performing a simple analysis.
HighlightPatterns ( string result ) : string

Highlights vulnerability patters in result.
PrintHighlightedResults ( IEnumerable results ) : string

Prints results, vulnerabilities are highlighted using HTML formatting.
PrintResults ( VulnerabilityAnalysisResults results ) : string

Prints analysis result to string with HTML formatting. Vulnerabilities are highlighted.

Method Details

GetModuleMetadata() public méthode

public GetModuleMetadata ( ) : Kentico.KInspector.Core.ModuleMetadata
Résultat Kentico.KInspector.Core.ModuleMetadata

GetResults() public méthode

public GetResults ( IInstanceInfo instanceInfo ) : ModuleResults
instanceInfo IInstanceInfo
Résultat Kentico.KInspector.Core.ModuleResults