@hoanghainh/komagu 2.5.0 → 2.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (197) hide show
  1. package/CHANGELOG.md +17 -0
  2. package/assess/lsa/examples/eval-run-6/gptoss-a/ai-run-stats.json +87 -0
  3. package/assess/lsa/examples/eval-run-6/gptoss-a/auth-model.md +120 -0
  4. package/assess/lsa/examples/eval-run-6/gptoss-a/batches/index.json +60 -0
  5. package/assess/lsa/examples/eval-run-6/gptoss-a/batches/injection-001.json +383 -0
  6. package/assess/lsa/examples/eval-run-6/gptoss-a/batches/injection-002.json +205 -0
  7. package/assess/lsa/examples/eval-run-6/gptoss-a/batches/privilege-001.json +838 -0
  8. package/assess/lsa/examples/eval-run-6/gptoss-a/batches/privilege-002.json +124 -0
  9. package/assess/lsa/examples/eval-run-6/gptoss-a/batches/routes-001.json +778 -0
  10. package/assess/lsa/examples/eval-run-6/gptoss-a/batches/routes-002.json +546 -0
  11. package/assess/lsa/examples/eval-run-6/gptoss-a/batches/routes-003.json +661 -0
  12. package/assess/lsa/examples/eval-run-6/gptoss-a/batches/routes-004.json +659 -0
  13. package/assess/lsa/examples/eval-run-6/gptoss-a/batches/routes-005.json +612 -0
  14. package/assess/lsa/examples/eval-run-6/gptoss-a/batches/routes-006.json +106 -0
  15. package/assess/lsa/examples/eval-run-6/gptoss-a/coverage.json +19 -0
  16. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/bola-routes-001.json +516 -0
  17. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/bola-routes-002.json +332 -0
  18. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/bola-routes-003.json +218 -0
  19. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/bola-routes-004.json +561 -0
  20. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/bola-routes-005.json +316 -0
  21. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/bola-routes-006.json +14 -0
  22. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/inj-injection-001.json +782 -0
  23. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/inj-injection-002.json +418 -0
  24. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/priv-privilege-001.json +627 -0
  25. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/priv-privilege-002.json +253 -0
  26. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-1.json +68 -0
  27. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-10.json +68 -0
  28. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-11.json +61 -0
  29. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-12.json +60 -0
  30. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-13.json +60 -0
  31. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-14.json +66 -0
  32. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-15.json +69 -0
  33. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-16.json +60 -0
  34. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-17.json +61 -0
  35. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-18.json +69 -0
  36. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-19.json +64 -0
  37. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-2.json +60 -0
  38. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-20.json +60 -0
  39. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-21.json +61 -0
  40. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-22.json +50 -0
  41. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-3.json +60 -0
  42. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-4.json +60 -0
  43. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-5.json +60 -0
  44. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-6.json +70 -0
  45. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-7.json +60 -0
  46. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-8.json +60 -0
  47. package/assess/lsa/examples/eval-run-6/gptoss-a/findings/verified-9.json +60 -0
  48. package/assess/lsa/examples/eval-run-6/gptoss-a/findings.json +4857 -0
  49. package/assess/lsa/examples/eval-run-6/gptoss-a/mass-assignment.candidates.json +232 -0
  50. package/assess/lsa/examples/eval-run-6/gptoss-a/report.ja.md +2112 -0
  51. package/assess/lsa/examples/eval-run-6/gptoss-a/report.md +2112 -0
  52. package/assess/lsa/examples/eval-run-6/gptoss-a/routes/routes-001.json +425 -0
  53. package/assess/lsa/examples/eval-run-6/gptoss-a/routes/routes-002.json +333 -0
  54. package/assess/lsa/examples/eval-run-6/gptoss-a/routes/routes-003.json +400 -0
  55. package/assess/lsa/examples/eval-run-6/gptoss-a/routes/routes-004.json +403 -0
  56. package/assess/lsa/examples/eval-run-6/gptoss-a/routes/routes-005.json +398 -0
  57. package/assess/lsa/examples/eval-run-6/gptoss-a/routes/routes-006.json +63 -0
  58. package/assess/lsa/examples/eval-run-6/gptoss-a/score.json +82 -0
  59. package/assess/lsa/examples/eval-run-6/gptoss-a/stack-profile.json +225 -0
  60. package/assess/lsa/examples/eval-run-6/gptoss-b/ai-run-stats.json +91 -0
  61. package/assess/lsa/examples/eval-run-6/gptoss-b/auth-model.md +120 -0
  62. package/assess/lsa/examples/eval-run-6/gptoss-b/batches/index.json +60 -0
  63. package/assess/lsa/examples/eval-run-6/gptoss-b/batches/injection-001.json +383 -0
  64. package/assess/lsa/examples/eval-run-6/gptoss-b/batches/injection-002.json +205 -0
  65. package/assess/lsa/examples/eval-run-6/gptoss-b/batches/privilege-001.json +838 -0
  66. package/assess/lsa/examples/eval-run-6/gptoss-b/batches/privilege-002.json +124 -0
  67. package/assess/lsa/examples/eval-run-6/gptoss-b/batches/routes-001.json +778 -0
  68. package/assess/lsa/examples/eval-run-6/gptoss-b/batches/routes-002.json +546 -0
  69. package/assess/lsa/examples/eval-run-6/gptoss-b/batches/routes-003.json +661 -0
  70. package/assess/lsa/examples/eval-run-6/gptoss-b/batches/routes-004.json +659 -0
  71. package/assess/lsa/examples/eval-run-6/gptoss-b/batches/routes-005.json +612 -0
  72. package/assess/lsa/examples/eval-run-6/gptoss-b/batches/routes-006.json +106 -0
  73. package/assess/lsa/examples/eval-run-6/gptoss-b/coverage.json +21 -0
  74. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/bola-routes-001.json +593 -0
  75. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/bola-routes-002.json +367 -0
  76. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/bola-routes-003.json +207 -0
  77. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/bola-routes-004.json +477 -0
  78. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/bola-routes-005.json +341 -0
  79. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/bola-routes-006.json +14 -0
  80. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/inj-injection-001.json +821 -0
  81. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/inj-injection-002.json +410 -0
  82. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/priv-privilege-001.json +649 -0
  83. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/priv-privilege-002.json +222 -0
  84. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-1.json +60 -0
  85. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-10.json +67 -0
  86. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-11.json +68 -0
  87. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-12.json +60 -0
  88. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-13.json +60 -0
  89. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-14.json +64 -0
  90. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-15.json +70 -0
  91. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-16.json +60 -0
  92. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-17.json +61 -0
  93. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-18.json +60 -0
  94. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-19.json +65 -0
  95. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-2.json +60 -0
  96. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-20.json +60 -0
  97. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-21.json +62 -0
  98. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-22.json +50 -0
  99. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-3.json +60 -0
  100. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-4.json +60 -0
  101. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-5.json +60 -0
  102. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-6.json +60 -0
  103. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-7.json +64 -0
  104. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-8.json +60 -0
  105. package/assess/lsa/examples/eval-run-6/gptoss-b/findings/verified-9.json +60 -0
  106. package/assess/lsa/examples/eval-run-6/gptoss-b/findings.json +4966 -0
  107. package/assess/lsa/examples/eval-run-6/gptoss-b/mass-assignment.candidates.json +232 -0
  108. package/assess/lsa/examples/eval-run-6/gptoss-b/routes/routes-001.json +425 -0
  109. package/assess/lsa/examples/eval-run-6/gptoss-b/routes/routes-002.json +333 -0
  110. package/assess/lsa/examples/eval-run-6/gptoss-b/routes/routes-003.json +400 -0
  111. package/assess/lsa/examples/eval-run-6/gptoss-b/routes/routes-004.json +403 -0
  112. package/assess/lsa/examples/eval-run-6/gptoss-b/routes/routes-005.json +398 -0
  113. package/assess/lsa/examples/eval-run-6/gptoss-b/routes/routes-006.json +63 -0
  114. package/assess/lsa/examples/eval-run-6/gptoss-b/score.json +87 -0
  115. package/assess/lsa/examples/eval-run-6/gptoss-b/stack-profile.json +225 -0
  116. package/assess/lsa/examples/eval-run-6/ground-truth.json +851 -0
  117. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/ai-run-stats.json +96 -0
  118. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/auth-model.md +191 -0
  119. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/batches/index.json +60 -0
  120. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/batches/injection-001.json +383 -0
  121. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/batches/injection-002.json +205 -0
  122. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/batches/privilege-001.json +838 -0
  123. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/batches/privilege-002.json +124 -0
  124. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/batches/routes-001.json +778 -0
  125. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/batches/routes-002.json +546 -0
  126. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/batches/routes-003.json +661 -0
  127. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/batches/routes-004.json +659 -0
  128. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/batches/routes-005.json +612 -0
  129. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/batches/routes-006.json +106 -0
  130. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/coverage.json +31 -0
  131. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/bola-routes-001.json +527 -0
  132. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/bola-routes-002.json +568 -0
  133. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/bola-routes-003.json +467 -0
  134. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/bola-routes-004.json +342 -0
  135. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/bola-routes-005.json +693 -0
  136. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/bola-routes-006.json +16 -0
  137. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/inj-injection-001.json +1123 -0
  138. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/inj-injection-002.json +391 -0
  139. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/priv-privilege-001.json +726 -0
  140. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/priv-privilege-002.json +306 -0
  141. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-1.json +137 -0
  142. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-10.json +106 -0
  143. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-11.json +81 -0
  144. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-12.json +135 -0
  145. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-13.json +135 -0
  146. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-14.json +135 -0
  147. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-15.json +110 -0
  148. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-16.json +116 -0
  149. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-17.json +141 -0
  150. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-18.json +135 -0
  151. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-19.json +140 -0
  152. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-2.json +135 -0
  153. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-20.json +82 -0
  154. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-21.json +74 -0
  155. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-22.json +99 -0
  156. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-3.json +140 -0
  157. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-4.json +145 -0
  158. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-5.json +135 -0
  159. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-6.json +135 -0
  160. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-7.json +87 -0
  161. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-8.json +125 -0
  162. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings/verified-9.json +135 -0
  163. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/findings.json +6989 -0
  164. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/mass-assignment.candidates.json +232 -0
  165. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/memory.log +36 -0
  166. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/routes/routes-001.json +425 -0
  167. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/routes/routes-002.json +333 -0
  168. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/routes/routes-003.json +400 -0
  169. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/routes/routes-004.json +403 -0
  170. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/routes/routes-005.json +398 -0
  171. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/routes/routes-006.json +63 -0
  172. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/score.json +106 -0
  173. package/assess/lsa/examples/eval-run-6/qwen-16k-nothink/stack-profile.json +225 -0
  174. package/assess/lsa/examples/eval-run-6/qwen-16k-partial/auth-model.md +517 -0
  175. package/assess/lsa/examples/eval-run-6/qwen-16k-partial/findings/bola-routes-001.json +5 -0
  176. package/assess/lsa/examples/eval-run-6/qwen-16k-partial/findings/bola-routes-002.json +428 -0
  177. package/assess/lsa/examples/eval-run-6/qwen-16k-partial/findings/bola-routes-003.json +388 -0
  178. package/assess/lsa/examples/eval-run-6/qwen-16k-partial/findings/bola-routes-004.json +463 -0
  179. package/assess/lsa/examples/eval-run-6/qwen-16k-partial/findings/bola-routes-005.json +5 -0
  180. package/assess/lsa/examples/eval-run-6/qwen-16k-partial/findings/bola-routes-006.json +67 -0
  181. package/assess/lsa/examples/eval-run-6/qwen-16k-partial/findings/inj-injection-001.json +964 -0
  182. package/assess/lsa/examples/eval-run-6/qwen-16k-partial/findings.partial.json +1872 -0
  183. package/assess/lsa/examples/eval-run-6/qwen-16k-partial/memory.log +194 -0
  184. package/assess/lsa/examples/eval-run-6/qwen-16k-partial/score.partial.json +108 -0
  185. package/assess/lsa/examples/eval-run-6/qwen-16k-partial/stack-profile.json +225 -0
  186. package/assess/lsa/scripts/laravel_routes.py +102 -0
  187. package/assess/lsa/scripts/map_routes.py +4 -1
  188. package/assess/lsa/tests/EVAL-RESULTS.md +126 -0
  189. package/assess/lsa/tests/test_eval_run_6.py +104 -0
  190. package/assess/lsa/tests/test_laravel_routes.py +95 -0
  191. package/operate/ai/client.py +22 -9
  192. package/operate/ai/runner.py +4 -2
  193. package/operate/cli/__init__.py +1 -1
  194. package/operate/cli/commands/scan.py +8 -1
  195. package/operate/tests/test_ai_reasoning_effort.py +65 -0
  196. package/operate/tests/test_ai_route_inventory.py +53 -0
  197. package/package.json +1 -1
@@ -0,0 +1,425 @@
1
+ {
2
+ "routes": [
3
+ {
4
+ "route_id": "R-0002",
5
+ "method": [
6
+ "ANY"
7
+ ],
8
+ "path": "/classic-asp/shop/member.asp?mode=edit",
9
+ "path_source": "declared",
10
+ "handler": {
11
+ "file": "classic-asp/shop/member.asp",
12
+ "line": 5
13
+ },
14
+ "id_inputs": [
15
+ {
16
+ "name": "mode",
17
+ "source": "any"
18
+ },
19
+ {
20
+ "name": "name",
21
+ "source": "form"
22
+ },
23
+ {
24
+ "name": "member_id",
25
+ "source": "form"
26
+ },
27
+ {
28
+ "name": "member_id",
29
+ "source": "query"
30
+ }
31
+ ],
32
+ "guards": [],
33
+ "data_ops": [
34
+ {
35
+ "op": "read"
36
+ }
37
+ ],
38
+ "needs_bola_audit": true
39
+ },
40
+ {
41
+ "route_id": "R-0003",
42
+ "method": [
43
+ "ANY"
44
+ ],
45
+ "path": "/classic-asp/shop/member.asp?mode=delete",
46
+ "path_source": "declared",
47
+ "handler": {
48
+ "file": "classic-asp/shop/member.asp",
49
+ "line": 9
50
+ },
51
+ "id_inputs": [
52
+ {
53
+ "name": "mode",
54
+ "source": "any"
55
+ },
56
+ {
57
+ "name": "name",
58
+ "source": "form"
59
+ },
60
+ {
61
+ "name": "member_id",
62
+ "source": "form"
63
+ },
64
+ {
65
+ "name": "member_id",
66
+ "source": "query"
67
+ }
68
+ ],
69
+ "guards": [],
70
+ "data_ops": [
71
+ {
72
+ "op": "read"
73
+ }
74
+ ],
75
+ "needs_bola_audit": true
76
+ },
77
+ {
78
+ "route_id": "R-0004",
79
+ "method": [
80
+ "ANY"
81
+ ],
82
+ "path": "/classic-asp/shop/order.asp",
83
+ "path_source": "declared",
84
+ "handler": {
85
+ "file": "classic-asp/shop/order.asp",
86
+ "line": 1
87
+ },
88
+ "id_inputs": [
89
+ {
90
+ "name": "id",
91
+ "source": "any"
92
+ },
93
+ {
94
+ "name": "sid",
95
+ "source": "query"
96
+ }
97
+ ],
98
+ "guards": [],
99
+ "data_ops": [
100
+ {
101
+ "op": "read"
102
+ }
103
+ ],
104
+ "needs_bola_audit": true
105
+ },
106
+ {
107
+ "route_id": "R-0005",
108
+ "method": [
109
+ "ANY"
110
+ ],
111
+ "path": "/coldfusion/app/OrderService.cfc?method=getOrder",
112
+ "path_source": "declared",
113
+ "handler": {
114
+ "file": "coldfusion/app/OrderService.cfc",
115
+ "line": 2
116
+ },
117
+ "id_inputs": [
118
+ {
119
+ "name": "orderId",
120
+ "source": "any"
121
+ }
122
+ ],
123
+ "guards": [],
124
+ "data_ops": [
125
+ {
126
+ "op": "read"
127
+ }
128
+ ],
129
+ "needs_bola_audit": true
130
+ },
131
+ {
132
+ "route_id": "R-0006",
133
+ "method": [
134
+ "ANY"
135
+ ],
136
+ "path": "/coldfusion/app/order.cfm",
137
+ "path_source": "declared",
138
+ "handler": {
139
+ "file": "coldfusion/app/order.cfm",
140
+ "line": 1
141
+ },
142
+ "id_inputs": [
143
+ {
144
+ "name": "id",
145
+ "source": "query"
146
+ }
147
+ ],
148
+ "guards": [],
149
+ "data_ops": [
150
+ {
151
+ "op": "read"
152
+ }
153
+ ],
154
+ "needs_bola_audit": true
155
+ },
156
+ {
157
+ "route_id": "R-0007",
158
+ "method": [
159
+ "POST"
160
+ ],
161
+ "path": "/Admin/DeleteUser",
162
+ "path_source": "declared",
163
+ "handler": {
164
+ "file": "dotnet-legacy/Web/Controllers/AdminController.cs",
165
+ "line": 12
166
+ },
167
+ "id_inputs": [
168
+ {
169
+ "name": "id",
170
+ "source": "any"
171
+ }
172
+ ],
173
+ "guards": [],
174
+ "data_ops": [
175
+ {
176
+ "op": "read"
177
+ }
178
+ ],
179
+ "needs_bola_audit": true
180
+ },
181
+ {
182
+ "route_id": "R-0008",
183
+ "method": [
184
+ "POST",
185
+ "POST"
186
+ ],
187
+ "path": "/Admin/ResetPassword",
188
+ "path_source": "declared",
189
+ "handler": {
190
+ "file": "dotnet-legacy/Web/Controllers/AdminController.cs",
191
+ "line": 22
192
+ },
193
+ "id_inputs": [
194
+ {
195
+ "name": "id",
196
+ "source": "any"
197
+ }
198
+ ],
199
+ "guards": [],
200
+ "data_ops": [
201
+ {
202
+ "op": "read"
203
+ }
204
+ ],
205
+ "needs_bola_audit": true
206
+ },
207
+ {
208
+ "route_id": "R-0009",
209
+ "method": [
210
+ "POST"
211
+ ],
212
+ "path": "/Admin/Export",
213
+ "path_source": "declared",
214
+ "handler": {
215
+ "file": "dotnet-legacy/Web/Controllers/AdminController.cs",
216
+ "line": 30
217
+ },
218
+ "id_inputs": [
219
+ {
220
+ "name": "isAdmin",
221
+ "source": "query"
222
+ }
223
+ ],
224
+ "guards": [],
225
+ "data_ops": [
226
+ {
227
+ "op": "read"
228
+ }
229
+ ],
230
+ "needs_bola_audit": true
231
+ },
232
+ {
233
+ "route_id": "R-0013",
234
+ "method": [
235
+ "ANY"
236
+ ],
237
+ "path": "/Invoice/Details",
238
+ "path_source": "declared",
239
+ "handler": {
240
+ "file": "dotnet-legacy/Web/Controllers/InvoiceController.cs",
241
+ "line": 11
242
+ },
243
+ "id_inputs": [
244
+ {
245
+ "name": "id",
246
+ "source": "any"
247
+ }
248
+ ],
249
+ "guards": [],
250
+ "data_ops": [
251
+ {
252
+ "op": "read"
253
+ }
254
+ ],
255
+ "needs_bola_audit": true
256
+ },
257
+ {
258
+ "route_id": "R-0014",
259
+ "method": [
260
+ "ANY"
261
+ ],
262
+ "path": "/Invoice/Mine",
263
+ "path_source": "declared",
264
+ "handler": {
265
+ "file": "dotnet-legacy/Web/Controllers/InvoiceController.cs",
266
+ "line": 17
267
+ },
268
+ "id_inputs": [
269
+ {
270
+ "name": "id",
271
+ "source": "any"
272
+ }
273
+ ],
274
+ "guards": [],
275
+ "data_ops": [
276
+ {
277
+ "op": "read"
278
+ }
279
+ ],
280
+ "needs_bola_audit": true
281
+ },
282
+ {
283
+ "route_id": "R-0015",
284
+ "method": [
285
+ "POST"
286
+ ],
287
+ "path": "/Invoice/Search",
288
+ "path_source": "declared",
289
+ "handler": {
290
+ "file": "dotnet-legacy/Web/Controllers/InvoiceController.cs",
291
+ "line": 26
292
+ },
293
+ "id_inputs": [
294
+ {
295
+ "name": "customer",
296
+ "source": "any"
297
+ }
298
+ ],
299
+ "guards": [],
300
+ "data_ops": [
301
+ {
302
+ "op": "read"
303
+ }
304
+ ],
305
+ "needs_bola_audit": true
306
+ },
307
+ {
308
+ "route_id": "R-0017",
309
+ "method": [
310
+ "ANY"
311
+ ],
312
+ "path": "/dotnet-legacy/Web/Orders/EditOrder.aspx",
313
+ "path_source": "declared",
314
+ "handler": {
315
+ "file": "dotnet-legacy/Web/Orders/EditOrder.aspx.vb",
316
+ "line": 1
317
+ },
318
+ "id_inputs": [
319
+ {
320
+ "name": "hfOrderId",
321
+ "source": "hidden_field"
322
+ },
323
+ {
324
+ "name": "txtNote",
325
+ "source": "form"
326
+ }
327
+ ],
328
+ "guards": [],
329
+ "data_ops": [
330
+ {
331
+ "op": "read"
332
+ }
333
+ ],
334
+ "needs_bola_audit": true
335
+ },
336
+ {
337
+ "route_id": "R-0018",
338
+ "method": [
339
+ "ANY"
340
+ ],
341
+ "path": "/dotnet-legacy/Web/Orders/OrderDetail.aspx",
342
+ "path_source": "declared",
343
+ "handler": {
344
+ "file": "dotnet-legacy/Web/Orders/OrderDetail.aspx.cs",
345
+ "line": 1
346
+ },
347
+ "id_inputs": [
348
+ {
349
+ "name": "id",
350
+ "source": "query"
351
+ },
352
+ {
353
+ "name": "cart",
354
+ "source": "form"
355
+ },
356
+ {
357
+ "name": "ref",
358
+ "source": "any"
359
+ }
360
+ ],
361
+ "guards": [],
362
+ "data_ops": [
363
+ {
364
+ "op": "read"
365
+ }
366
+ ],
367
+ "needs_bola_audit": true
368
+ },
369
+ {
370
+ "route_id": "R-0019",
371
+ "method": [
372
+ "ANY"
373
+ ],
374
+ "path": "/order/detail.jsp",
375
+ "path_source": "declared",
376
+ "handler": {
377
+ "file": "java-legacy/WebContent/order/detail.jsp",
378
+ "line": 1
379
+ },
380
+ "id_inputs": [
381
+ {
382
+ "name": "no",
383
+ "source": "any"
384
+ }
385
+ ],
386
+ "guards": [],
387
+ "data_ops": [
388
+ {
389
+ "op": "read"
390
+ }
391
+ ],
392
+ "needs_bola_audit": true
393
+ },
394
+ {
395
+ "route_id": "R-0001",
396
+ "method": [
397
+ "ANY"
398
+ ],
399
+ "path": "/user/edit.do",
400
+ "path_source": "declared",
401
+ "handler": {
402
+ "file": "java-legacy/src/com/acme/struts/EditUserAction.java",
403
+ "line": 8
404
+ },
405
+ "id_inputs": [
406
+ {
407
+ "name": "user_id",
408
+ "source": "any"
409
+ },
410
+ {
411
+ "name": "email",
412
+ "source": "any"
413
+ }
414
+ ],
415
+ "guards": [],
416
+ "data_ops": [
417
+ {
418
+ "op": "read"
419
+ }
420
+ ],
421
+ "needs_bola_audit": true
422
+ }
423
+ ],
424
+ "rejected": []
425
+ }