blst-security / cherrybomb

Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.

Home Page:https://www.blstsecurity.com/cherrybomb

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Authorization input validation - Error handling

RoyB99 opened this issue · comments

Add better error handling in the auth.rs (/swagger/src/scan/active/http_client) file for auth types.
line 15 includes a panic and the rest trust the input to be valid.

There needs to be error handling for input validation.

Cheers,

@RoyB99
I appreciate your suggestion. We'll include support for more sophisticated error handling in the upcoming release.