blst-security / cherrybomb

Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.

Home Page:https://www.blstsecurity.com/cherrybomb

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Servers _override

DeliciousBounty opened this issue · comments

@RazMag

The override for the flag server is broken

Few questions to make it clear:
The flag "servers-override" from the config file is intended to override any others servers that the user may have supply from the command line?
Or should the inverted, "server" supplied as an input on the command line take precedence over the configuration file?

Personally I I advise that " servers_override" from the config file will add and not override any oyhers servers and the "--server" flag will override every server including from the config file and the oas file.

OAS SERVERS

The association between the check from "engine" crate and the main crate (I mean the main function and user configuration) is a crucial element.
I'm referring to the fact that you can access the user-provided servers from the engine crate including the active check.
For the moment only the servers provided by the OAS file will always be used by the active check module.