@hoanghainh/komagu 1.8.0 → 2.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (210) hide show
  1. package/CHANGELOG.md +20 -0
  2. package/README.md +1 -1
  3. package/assess/lsa/CHANGELOG.md +6 -0
  4. package/assess/lsa/VERSION +1 -1
  5. package/assess/lsa/adapters/build_adapters.py +16 -8
  6. package/assess/lsa/adapters/codex/README.md +1 -1
  7. package/assess/lsa/adapters/generic/README.md +1 -1
  8. package/assess/lsa/examples/eval-run-4/ground-truth.json +823 -0
  9. package/assess/lsa/examples/eval-run-4/iter0-gptoss-a/ai-run-stats.json +58 -0
  10. package/assess/lsa/examples/eval-run-4/iter0-gptoss-a/coverage.json +85 -0
  11. package/assess/lsa/examples/eval-run-4/iter0-gptoss-a/findings/priv-privilege-001.json +822 -0
  12. package/assess/lsa/examples/eval-run-4/iter0-gptoss-a/findings/priv-privilege-002.json +393 -0
  13. package/assess/lsa/examples/eval-run-4/iter0-gptoss-a/findings.json +4477 -0
  14. package/assess/lsa/examples/eval-run-4/iter0-gptoss-a/mass-assignment.candidates.json +232 -0
  15. package/assess/lsa/examples/eval-run-4/iter0-gptoss-a/routes/routes-001.json +425 -0
  16. package/assess/lsa/examples/eval-run-4/iter0-gptoss-a/routes/routes-002.json +333 -0
  17. package/assess/lsa/examples/eval-run-4/iter0-gptoss-a/routes/routes-003.json +400 -0
  18. package/assess/lsa/examples/eval-run-4/iter0-gptoss-a/routes/routes-004.json +403 -0
  19. package/assess/lsa/examples/eval-run-4/iter0-gptoss-a/routes/routes-005.json +398 -0
  20. package/assess/lsa/examples/eval-run-4/iter0-gptoss-a/routes/routes-006.json +63 -0
  21. package/assess/lsa/examples/eval-run-4/iter0-gptoss-a/score.json +120 -0
  22. package/assess/lsa/examples/eval-run-4/iter1-gptoss-a/ai-run-stats.json +55 -0
  23. package/assess/lsa/examples/eval-run-4/iter1-gptoss-a/coverage.json +50 -0
  24. package/assess/lsa/examples/eval-run-4/iter1-gptoss-a/findings/priv-privilege-001.json +613 -0
  25. package/assess/lsa/examples/eval-run-4/iter1-gptoss-a/findings/priv-privilege-002.json +287 -0
  26. package/assess/lsa/examples/eval-run-4/iter1-gptoss-a/findings.json +4870 -0
  27. package/assess/lsa/examples/eval-run-4/iter1-gptoss-a/mass-assignment.candidates.json +232 -0
  28. package/assess/lsa/examples/eval-run-4/iter1-gptoss-a/routes/routes-001.json +425 -0
  29. package/assess/lsa/examples/eval-run-4/iter1-gptoss-a/routes/routes-002.json +333 -0
  30. package/assess/lsa/examples/eval-run-4/iter1-gptoss-a/routes/routes-003.json +400 -0
  31. package/assess/lsa/examples/eval-run-4/iter1-gptoss-a/routes/routes-004.json +403 -0
  32. package/assess/lsa/examples/eval-run-4/iter1-gptoss-a/routes/routes-005.json +398 -0
  33. package/assess/lsa/examples/eval-run-4/iter1-gptoss-a/routes/routes-006.json +63 -0
  34. package/assess/lsa/examples/eval-run-4/iter1-gptoss-a/score.json +107 -0
  35. package/assess/lsa/examples/eval-run-4/iter1-gptoss-b/ai-run-stats.json +58 -0
  36. package/assess/lsa/examples/eval-run-4/iter1-gptoss-b/coverage.json +92 -0
  37. package/assess/lsa/examples/eval-run-4/iter1-gptoss-b/findings/priv-privilege-001.json +645 -0
  38. package/assess/lsa/examples/eval-run-4/iter1-gptoss-b/findings/priv-privilege-002.json +222 -0
  39. package/assess/lsa/examples/eval-run-4/iter1-gptoss-b/findings.json +4859 -0
  40. package/assess/lsa/examples/eval-run-4/iter1-gptoss-b/mass-assignment.candidates.json +232 -0
  41. package/assess/lsa/examples/eval-run-4/iter1-gptoss-b/routes/routes-001.json +425 -0
  42. package/assess/lsa/examples/eval-run-4/iter1-gptoss-b/routes/routes-002.json +333 -0
  43. package/assess/lsa/examples/eval-run-4/iter1-gptoss-b/routes/routes-003.json +400 -0
  44. package/assess/lsa/examples/eval-run-4/iter1-gptoss-b/routes/routes-004.json +403 -0
  45. package/assess/lsa/examples/eval-run-4/iter1-gptoss-b/routes/routes-005.json +398 -0
  46. package/assess/lsa/examples/eval-run-4/iter1-gptoss-b/routes/routes-006.json +63 -0
  47. package/assess/lsa/examples/eval-run-4/iter1-gptoss-b/score.json +121 -0
  48. package/assess/lsa/examples/eval-run-4/iter1-qwen-a-incomplete/coverage.json +111 -0
  49. package/assess/lsa/examples/eval-run-4/iter1-qwen-a-incomplete/findings/priv-privilege-001.json +6 -0
  50. package/assess/lsa/examples/eval-run-4/iter1-qwen-a-incomplete/findings/priv-privilege-002.json +344 -0
  51. package/assess/lsa/examples/eval-run-4/iter1-qwen-a-incomplete/findings.json +3544 -0
  52. package/assess/lsa/examples/eval-run-4/iter1-qwen-a-incomplete/mass-assignment.candidates.json +232 -0
  53. package/assess/lsa/examples/eval-run-4/iter1-qwen-a-incomplete/routes/routes-001.json +425 -0
  54. package/assess/lsa/examples/eval-run-4/iter1-qwen-a-incomplete/routes/routes-002.json +333 -0
  55. package/assess/lsa/examples/eval-run-4/iter1-qwen-a-incomplete/routes/routes-003.json +400 -0
  56. package/assess/lsa/examples/eval-run-4/iter1-qwen-a-incomplete/routes/routes-004.json +403 -0
  57. package/assess/lsa/examples/eval-run-4/iter1-qwen-a-incomplete/routes/routes-005.json +398 -0
  58. package/assess/lsa/examples/eval-run-4/iter1-qwen-a-incomplete/routes/routes-006.json +63 -0
  59. package/assess/lsa/examples/eval-run-4/iter1-qwen-a-incomplete/score.json +123 -0
  60. package/assess/lsa/examples/eval-run-4/iter2-gptoss-a/ai-run-stats.json +50 -0
  61. package/assess/lsa/examples/eval-run-4/iter2-gptoss-a/coverage.json +42 -0
  62. package/assess/lsa/examples/eval-run-4/iter2-gptoss-a/findings/priv-privilege-001.json +540 -0
  63. package/assess/lsa/examples/eval-run-4/iter2-gptoss-a/findings/priv-privilege-002.json +238 -0
  64. package/assess/lsa/examples/eval-run-4/iter2-gptoss-a/findings.json +4383 -0
  65. package/assess/lsa/examples/eval-run-4/iter2-gptoss-a/findings.sarif +8729 -0
  66. package/assess/lsa/examples/eval-run-4/iter2-gptoss-a/mass-assignment.candidates.json +232 -0
  67. package/assess/lsa/examples/eval-run-4/iter2-gptoss-a/report.ja.md +1911 -0
  68. package/assess/lsa/examples/eval-run-4/iter2-gptoss-a/report.md +1911 -0
  69. package/assess/lsa/examples/eval-run-4/iter2-gptoss-a/routes/routes-001.json +425 -0
  70. package/assess/lsa/examples/eval-run-4/iter2-gptoss-a/routes/routes-002.json +333 -0
  71. package/assess/lsa/examples/eval-run-4/iter2-gptoss-a/routes/routes-003.json +400 -0
  72. package/assess/lsa/examples/eval-run-4/iter2-gptoss-a/routes/routes-004.json +403 -0
  73. package/assess/lsa/examples/eval-run-4/iter2-gptoss-a/routes/routes-005.json +398 -0
  74. package/assess/lsa/examples/eval-run-4/iter2-gptoss-a/routes/routes-006.json +63 -0
  75. package/assess/lsa/examples/eval-run-4/iter2-gptoss-a/score.json +101 -0
  76. package/assess/lsa/examples/eval-run-4/iter2-gptoss-a/stack-profile.json +226 -0
  77. package/assess/lsa/examples/eval-run-4/iter2-gptoss-b/ai-run-stats.json +54 -0
  78. package/assess/lsa/examples/eval-run-4/iter2-gptoss-b/coverage.json +66 -0
  79. package/assess/lsa/examples/eval-run-4/iter2-gptoss-b/findings/priv-privilege-001.json +440 -0
  80. package/assess/lsa/examples/eval-run-4/iter2-gptoss-b/findings/priv-privilege-002.json +229 -0
  81. package/assess/lsa/examples/eval-run-4/iter2-gptoss-b/findings.json +3424 -0
  82. package/assess/lsa/examples/eval-run-4/iter2-gptoss-b/mass-assignment.candidates.json +232 -0
  83. package/assess/lsa/examples/eval-run-4/iter2-gptoss-b/routes/routes-001.json +425 -0
  84. package/assess/lsa/examples/eval-run-4/iter2-gptoss-b/routes/routes-002.json +333 -0
  85. package/assess/lsa/examples/eval-run-4/iter2-gptoss-b/routes/routes-003.json +400 -0
  86. package/assess/lsa/examples/eval-run-4/iter2-gptoss-b/routes/routes-004.json +403 -0
  87. package/assess/lsa/examples/eval-run-4/iter2-gptoss-b/routes/routes-005.json +398 -0
  88. package/assess/lsa/examples/eval-run-4/iter2-gptoss-b/routes/routes-006.json +63 -0
  89. package/assess/lsa/examples/eval-run-4/iter2-gptoss-b/score.json +120 -0
  90. package/assess/lsa/examples/eval-run-5/gptoss-a/ai-run-stats.json +88 -0
  91. package/assess/lsa/examples/eval-run-5/gptoss-a/coverage.json +36 -0
  92. package/assess/lsa/examples/eval-run-5/gptoss-a/findings/priv-privilege-001.json +530 -0
  93. package/assess/lsa/examples/eval-run-5/gptoss-a/findings/priv-privilege-002.json +248 -0
  94. package/assess/lsa/examples/eval-run-5/gptoss-a/findings.json +4766 -0
  95. package/assess/lsa/examples/eval-run-5/gptoss-a/findings.sarif +9326 -0
  96. package/assess/lsa/examples/eval-run-5/gptoss-a/mass-assignment.candidates.json +232 -0
  97. package/assess/lsa/examples/eval-run-5/gptoss-a/report.ja.md +2011 -0
  98. package/assess/lsa/examples/eval-run-5/gptoss-a/report.md +2011 -0
  99. package/assess/lsa/examples/eval-run-5/gptoss-a/routes/routes-001.json +425 -0
  100. package/assess/lsa/examples/eval-run-5/gptoss-a/routes/routes-002.json +333 -0
  101. package/assess/lsa/examples/eval-run-5/gptoss-a/routes/routes-003.json +400 -0
  102. package/assess/lsa/examples/eval-run-5/gptoss-a/routes/routes-004.json +403 -0
  103. package/assess/lsa/examples/eval-run-5/gptoss-a/routes/routes-005.json +398 -0
  104. package/assess/lsa/examples/eval-run-5/gptoss-a/routes/routes-006.json +63 -0
  105. package/assess/lsa/examples/eval-run-5/gptoss-a/score.json +80 -0
  106. package/assess/lsa/examples/eval-run-5/gptoss-a/stack-profile.json +226 -0
  107. package/assess/lsa/examples/eval-run-5/gptoss-b/ai-run-stats.json +83 -0
  108. package/assess/lsa/examples/eval-run-5/gptoss-b/coverage.json +44 -0
  109. package/assess/lsa/examples/eval-run-5/gptoss-b/findings/priv-privilege-001.json +579 -0
  110. package/assess/lsa/examples/eval-run-5/gptoss-b/findings/priv-privilege-002.json +268 -0
  111. package/assess/lsa/examples/eval-run-5/gptoss-b/findings.json +3913 -0
  112. package/assess/lsa/examples/eval-run-5/gptoss-b/mass-assignment.candidates.json +232 -0
  113. package/assess/lsa/examples/eval-run-5/gptoss-b/routes/routes-001.json +425 -0
  114. package/assess/lsa/examples/eval-run-5/gptoss-b/routes/routes-002.json +333 -0
  115. package/assess/lsa/examples/eval-run-5/gptoss-b/routes/routes-003.json +400 -0
  116. package/assess/lsa/examples/eval-run-5/gptoss-b/routes/routes-004.json +403 -0
  117. package/assess/lsa/examples/eval-run-5/gptoss-b/routes/routes-005.json +398 -0
  118. package/assess/lsa/examples/eval-run-5/gptoss-b/routes/routes-006.json +63 -0
  119. package/assess/lsa/examples/eval-run-5/gptoss-b/score.json +94 -0
  120. package/assess/lsa/examples/eval-run-5/ground-truth.json +823 -0
  121. package/assess/lsa/knowledge/severity-and-cwe.md +1 -1
  122. package/assess/lsa/prompts/35-privilege-auditor.md +3 -1
  123. package/assess/lsa/scripts/baseline.py +5 -2
  124. package/assess/lsa/scripts/findings_to_sarif.py +24 -1
  125. package/assess/lsa/tests/EVAL-RESULTS.md +156 -0
  126. package/assess/lsa/tests/score_findings.py +58 -0
  127. package/assess/lsa/tests/test_adapters.py +21 -2
  128. package/assess/lsa/tests/test_baseline.py +8 -0
  129. package/assess/lsa/tests/test_contract_groundwork.py +7 -7
  130. package/assess/lsa/tests/test_eval_run_4.py +73 -0
  131. package/assess/lsa/tests/test_eval_run_5.py +73 -0
  132. package/assess/lsa/tests/test_privilege_tier2.py +30 -0
  133. package/operate/ai/anchoring.py +130 -0
  134. package/operate/ai/client.py +13 -0
  135. package/operate/ai/context.py +105 -0
  136. package/operate/ai/runner.py +197 -69
  137. package/operate/cli/__init__.py +1 -1
  138. package/operate/cli/commands/scan.py +3 -8
  139. package/operate/cli/commands/test.py +1 -1
  140. package/operate/cli/env.py +4 -20
  141. package/operate/cross_user_tester/persona_matrix.py +5 -1
  142. package/operate/devsecops/pipeline.py +5 -5
  143. package/operate/exploit/generator.py +5 -1
  144. package/operate/lsa_sarif/lsa_to_sarif.py +24 -2
  145. package/operate/lsa_sarif/sarif_findings.py +96 -0
  146. package/operate/remediator/runner.py +1 -5
  147. package/operate/remediator/strategies.py +1 -1
  148. package/operate/tests/test_ai_anchoring.py +184 -0
  149. package/operate/tests/test_cli_baseline.py +1 -9
  150. package/operate/tests/test_cli_env.py +8 -29
  151. package/operate/tests/test_cross_user_pipeline.py +2 -2
  152. package/operate/tests/test_exploit_and_virtual_patch.py +3 -3
  153. package/operate/tests/test_headless_ai.py +148 -1
  154. package/operate/tests/test_npm_package.py +2 -16
  155. package/operate/tests/test_sarif_from_scan.py +156 -0
  156. package/package.json +2 -4
  157. package/remediate/authz/README.md +1 -1
  158. package/remediate/authz/dotnet/src/Komagu.Security.Authorization/DefaultKomaguAuthorizationService.cs +1 -1
  159. package/remediate/authz/dotnet/src/Komagu.Security.Authorization/SecurityAuditEvent.cs +2 -2
  160. package/remediate/authz/golang/authz.go +1 -1
  161. package/remediate/authz/nodejs/src/service.js +1 -1
  162. package/remediate/authz/nodejs/tests/test-authz.js +1 -1
  163. package/remediate/authz/patcher.py +3 -4
  164. package/remediate/authz/python/komagu_authz/models.py +2 -2
  165. package/remediate/authz/python/tests/test_fastapi_adapter.py +1 -1
  166. package/remediate/authz/python/tests/test_fastapi_d5_crosstest.py +1 -1
  167. package/remediate/authz/python/tests/test_python_authz.py +3 -3
  168. package/remediate/authz/spring/src/main/kotlin/io/komagu/security/authorization/DefaultKomaguSecurityManager.kt +1 -1
  169. package/remediate/authz/spring/src/main/kotlin/io/komagu/security/authorization/SecurityAuditEvent.kt +1 -2
  170. package/remediate/authz/tests/test_bola_patcher.py +1 -1
  171. package/remediate/edge/coraza/rules/coraza-crs-custom.conf +3 -4
  172. package/remediate/edge/coraza/virtual_patcher.py +4 -6
  173. package/remediate/edge/docker-compose.yml +1 -1
  174. package/remediate/ekyc/server/jpki_verifier.py +2 -8
  175. package/remediate/ekyc/server/tokenization.py +2 -8
  176. package/remediate/identity/README.md +5 -5
  177. package/remediate/identity/dotnet/src/Komagu.Security.Identity/KomaguOidcOptions.cs +2 -2
  178. package/remediate/identity/dotnet/tests/Komagu.Security.Identity.Tests/TestTokenGenerator.cs +1 -1
  179. package/remediate/identity/dotnet/tests/Komagu.Security.Identity.Tests/TokenValidationTests.cs +1 -1
  180. package/remediate/identity/python/komagu_identity/oidc_validator.py +2 -8
  181. package/remediate/identity/python/tests/test_oidc_validator.py +1 -1
  182. package/remediate/identity/spring/src/main/kotlin/io/komagu/security/identity/KomaguOidcProperties.kt +2 -2
  183. package/remediate/identity/spring/src/test/kotlin/io/komagu/security/identity/KomaguIdentityAutoConfigurationTest.kt +2 -2
  184. package/remediate/identity/spring/src/test/kotlin/io/komagu/security/identity/TestJwtFactory.kt +1 -1
  185. package/remediate/identity/spring/src/test/kotlin/io/komagu/security/identity/TokenValidationIntegrationTest.kt +1 -1
  186. package/remediate/identity/test-env/realm-komagu.json +1 -1
  187. package/remediate/legacy_shims/coldfusion/KomaguSecurityShim.cfc +5 -5
  188. package/remediate/query/README.md +1 -1
  189. package/remediate/query/dotnet/src/Komagu.Security.Query.Analyzers/DiagnosticIds.cs +1 -1
  190. package/remediate/query/dotnet/src/Komagu.Security.Query.Analyzers/Komagu.Security.Query.Analyzers.csproj +1 -1
  191. package/remediate/query/spring/src/main/kotlin/io/komagu/security/query/detekt/KomaguRuleSetProvider.kt +1 -1
  192. package/remediate/resilience/dr/dr_manager.py +2 -8
  193. package/remediate/resilience/dr/runbook.md +2 -2
  194. package/remediate/resilience/terraform/variables.tf +1 -1
  195. package/remediate/tenancy/audit/audit_trail.py +2 -8
  196. package/remediate/tenancy/crypto/byok_manager.py +2 -8
  197. package/remediate/tenancy/middleware/tenant_context.py +2 -8
  198. package/remediate/tenancy/sql/rls_isolation.sql +11 -11
  199. package/remediate/tenancy/sql/schema_per_tenant.sql +7 -7
  200. package/remediate/tenancy/test_sql_postgres.py +1 -1
  201. package/remediate/tenancy/tests/test_tenancy.py +4 -4
  202. package/bin/komainu +0 -16
  203. package/bin/komainu-legacy.js +0 -16
  204. package/remediate/ekyc/tests/test_legacy_env.py +0 -33
  205. package/remediate/identity/python/tests/test_legacy_env.py +0 -33
  206. package/remediate/identity/spring/src/main/kotlin/io/komagu/security/identity/LegacyKomainuPropertiesPostProcessor.kt +0 -60
  207. package/remediate/identity/spring/src/main/resources/META-INF/spring.factories +0 -2
  208. package/remediate/identity/spring/src/test/kotlin/io/komagu/security/identity/LegacyKomainuPropertiesPostProcessorTest.kt +0 -86
  209. package/remediate/resilience/tests/test_legacy_env.py +0 -33
  210. package/remediate/tenancy/tests/test_legacy_env.py +0 -49
@@ -0,0 +1,400 @@
1
+ {
2
+ "routes": [
3
+ {
4
+ "route_id": "R-0033",
5
+ "method": [
6
+ "GET"
7
+ ],
8
+ "path": "/orders/:id",
9
+ "path_source": "declared",
10
+ "handler": {
11
+ "file": "node-express/routes/orders.js",
12
+ "line": 8
13
+ },
14
+ "id_inputs": [
15
+ {
16
+ "name": "id",
17
+ "source": "path"
18
+ },
19
+ {
20
+ "name": "id",
21
+ "source": "path"
22
+ }
23
+ ],
24
+ "guards": [],
25
+ "data_ops": [
26
+ {
27
+ "op": "read"
28
+ }
29
+ ],
30
+ "needs_bola_audit": true
31
+ },
32
+ {
33
+ "route_id": "R-0034",
34
+ "method": [
35
+ "GET"
36
+ ],
37
+ "path": "/orders/:id/mine",
38
+ "path_source": "declared",
39
+ "handler": {
40
+ "file": "node-express/routes/orders.js",
41
+ "line": 12
42
+ },
43
+ "id_inputs": [
44
+ {
45
+ "name": "id",
46
+ "source": "path"
47
+ },
48
+ {
49
+ "name": "id",
50
+ "source": "path"
51
+ }
52
+ ],
53
+ "guards": [],
54
+ "data_ops": [
55
+ {
56
+ "op": "read"
57
+ }
58
+ ],
59
+ "needs_bola_audit": true
60
+ },
61
+ {
62
+ "route_id": "R-0035",
63
+ "method": [
64
+ "GET"
65
+ ],
66
+ "path": "/reports",
67
+ "path_source": "declared",
68
+ "handler": {
69
+ "file": "node-express/routes/orders.js",
70
+ "line": 16
71
+ },
72
+ "id_inputs": [
73
+ {
74
+ "name": "month",
75
+ "source": "query"
76
+ }
77
+ ],
78
+ "guards": [],
79
+ "data_ops": [
80
+ {
81
+ "op": "read"
82
+ }
83
+ ],
84
+ "needs_bola_audit": true
85
+ },
86
+ {
87
+ "route_id": "R-0036",
88
+ "method": [
89
+ "POST"
90
+ ],
91
+ "path": "/login",
92
+ "path_source": "declared",
93
+ "handler": {
94
+ "file": "node-express/routes/orders.js",
95
+ "line": 20
96
+ },
97
+ "id_inputs": [
98
+ {
99
+ "name": "id",
100
+ "source": "path"
101
+ }
102
+ ],
103
+ "guards": [],
104
+ "data_ops": [
105
+ {
106
+ "op": "read"
107
+ }
108
+ ],
109
+ "needs_bola_audit": true
110
+ },
111
+ {
112
+ "route_id": "R-0037",
113
+ "method": [
114
+ "GET"
115
+ ],
116
+ "path": "/search",
117
+ "path_source": "declared",
118
+ "handler": {
119
+ "file": "node-express/routes/orders.js",
120
+ "line": 24
121
+ },
122
+ "id_inputs": [
123
+ {
124
+ "name": "n",
125
+ "source": "query"
126
+ }
127
+ ],
128
+ "guards": [],
129
+ "data_ops": [
130
+ {
131
+ "op": "read"
132
+ }
133
+ ],
134
+ "needs_bola_audit": true
135
+ },
136
+ {
137
+ "route_id": "R-0038",
138
+ "method": [
139
+ "GET"
140
+ ],
141
+ "path": "/stats",
142
+ "path_source": "declared",
143
+ "handler": {
144
+ "file": "node-express/routes/orders.js",
145
+ "line": 28
146
+ },
147
+ "id_inputs": [
148
+ {
149
+ "name": "shop",
150
+ "source": "query"
151
+ }
152
+ ],
153
+ "guards": [],
154
+ "data_ops": [
155
+ {
156
+ "op": "read"
157
+ }
158
+ ],
159
+ "needs_bola_audit": true
160
+ },
161
+ {
162
+ "route_id": "R-0043",
163
+ "method": [
164
+ "ANY"
165
+ ],
166
+ "path": "/perl-cgi/cgi-bin/order.cgi",
167
+ "path_source": "declared",
168
+ "handler": {
169
+ "file": "perl-cgi/cgi-bin/order.cgi",
170
+ "line": 1
171
+ },
172
+ "id_inputs": [
173
+ {
174
+ "name": "user_id",
175
+ "source": "any"
176
+ },
177
+ {
178
+ "name": "id",
179
+ "source": "any"
180
+ },
181
+ {
182
+ "name": "cart",
183
+ "source": "any"
184
+ }
185
+ ],
186
+ "guards": [],
187
+ "data_ops": [
188
+ {
189
+ "op": "read"
190
+ }
191
+ ],
192
+ "needs_bola_audit": true
193
+ },
194
+ {
195
+ "route_id": "R-0044",
196
+ "method": [
197
+ "ANY"
198
+ ],
199
+ "path": "/invoice/view/{id}",
200
+ "path_source": "declared",
201
+ "handler": {
202
+ "file": "php-codeigniter/application/controllers/Invoice.php",
203
+ "line": 9
204
+ },
205
+ "id_inputs": [
206
+ {
207
+ "name": "id",
208
+ "source": "path"
209
+ }
210
+ ],
211
+ "guards": [],
212
+ "data_ops": [
213
+ {
214
+ "op": "read"
215
+ }
216
+ ],
217
+ "needs_bola_audit": true
218
+ },
219
+ {
220
+ "route_id": "R-0045",
221
+ "method": [
222
+ "ANY"
223
+ ],
224
+ "path": "/invoice/mine/{id}",
225
+ "path_source": "declared",
226
+ "handler": {
227
+ "file": "php-codeigniter/application/controllers/Invoice.php",
228
+ "line": 14
229
+ },
230
+ "id_inputs": [
231
+ {
232
+ "name": "id",
233
+ "source": "path"
234
+ }
235
+ ],
236
+ "guards": [],
237
+ "data_ops": [
238
+ {
239
+ "op": "read"
240
+ }
241
+ ],
242
+ "needs_bola_audit": true
243
+ },
244
+ {
245
+ "route_id": "R-0046",
246
+ "method": [
247
+ "ANY"
248
+ ],
249
+ "path": "/invoice/update",
250
+ "path_source": "declared",
251
+ "handler": {
252
+ "file": "php-codeigniter/application/controllers/Invoice.php",
253
+ "line": 20
254
+ },
255
+ "id_inputs": [
256
+ {
257
+ "name": "invoice_id",
258
+ "source": "form"
259
+ },
260
+ {
261
+ "name": "note",
262
+ "source": "form"
263
+ }
264
+ ],
265
+ "guards": [],
266
+ "data_ops": [
267
+ {
268
+ "op": "read"
269
+ }
270
+ ],
271
+ "needs_bola_audit": true
272
+ },
273
+ {
274
+ "route_id": "R-0047",
275
+ "method": [
276
+ "ANY"
277
+ ],
278
+ "path": "/account/register/{request}",
279
+ "path_source": "declared",
280
+ "handler": {
281
+ "file": "php-laravel/app/Http/Controllers/AccountController.php",
282
+ "line": 11
283
+ },
284
+ "id_inputs": [
285
+ {
286
+ "name": "request",
287
+ "source": "path"
288
+ }
289
+ ],
290
+ "guards": [],
291
+ "data_ops": [
292
+ {
293
+ "op": "read"
294
+ }
295
+ ],
296
+ "needs_bola_audit": true
297
+ },
298
+ {
299
+ "route_id": "R-0048",
300
+ "method": [
301
+ "ANY"
302
+ ],
303
+ "path": "/account/post/{request}",
304
+ "path_source": "declared",
305
+ "handler": {
306
+ "file": "php-laravel/app/Http/Controllers/AccountController.php",
307
+ "line": 16
308
+ },
309
+ "id_inputs": [
310
+ {
311
+ "name": "request",
312
+ "source": "path"
313
+ }
314
+ ],
315
+ "guards": [],
316
+ "data_ops": [
317
+ {
318
+ "op": "read"
319
+ }
320
+ ],
321
+ "needs_bola_audit": true
322
+ },
323
+ {
324
+ "route_id": "R-0049",
325
+ "method": [
326
+ "ANY"
327
+ ],
328
+ "path": "/account/team/{request}",
329
+ "path_source": "declared",
330
+ "handler": {
331
+ "file": "php-laravel/app/Http/Controllers/AccountController.php",
332
+ "line": 21
333
+ },
334
+ "id_inputs": [
335
+ {
336
+ "name": "request",
337
+ "source": "path"
338
+ }
339
+ ],
340
+ "guards": [],
341
+ "data_ops": [
342
+ {
343
+ "op": "read"
344
+ }
345
+ ],
346
+ "needs_bola_audit": true
347
+ },
348
+ {
349
+ "route_id": "R-0050",
350
+ "method": [
351
+ "ANY"
352
+ ],
353
+ "path": "/account/rename/{request}",
354
+ "path_source": "declared",
355
+ "handler": {
356
+ "file": "php-laravel/app/Http/Controllers/AccountController.php",
357
+ "line": 26
358
+ },
359
+ "id_inputs": [
360
+ {
361
+ "name": "request",
362
+ "source": "path"
363
+ }
364
+ ],
365
+ "guards": [],
366
+ "data_ops": [
367
+ {
368
+ "op": "read"
369
+ }
370
+ ],
371
+ "needs_bola_audit": true
372
+ },
373
+ {
374
+ "route_id": "R-0051",
375
+ "method": [
376
+ "ANY"
377
+ ],
378
+ "path": "/account/profile/{request}",
379
+ "path_source": "declared",
380
+ "handler": {
381
+ "file": "php-laravel/app/Http/Controllers/AccountController.php",
382
+ "line": 33
383
+ },
384
+ "id_inputs": [
385
+ {
386
+ "name": "request",
387
+ "source": "path"
388
+ }
389
+ ],
390
+ "guards": [],
391
+ "data_ops": [
392
+ {
393
+ "op": "read"
394
+ }
395
+ ],
396
+ "needs_bola_audit": true
397
+ }
398
+ ],
399
+ "rejected": []
400
+ }