Add comprehensive security tests for OWASP A03 (Injection) and A10 (SSRF)
- Implemented InjectionTests.cs to cover various injection vulnerabilities including SQL, NoSQL, Command, LDAP, and XPath injections. - Created SsrfTests.cs to test for Server-Side Request Forgery (SSRF) vulnerabilities, including internal URL access, cloud metadata access, and URL allowlist bypass attempts. - Introduced MaliciousPayloads.cs to store a collection of malicious payloads for testing various security vulnerabilities. - Added SecurityAssertions.cs for common security-specific assertion helpers. - Established SecurityTestBase.cs as a base class for security tests, providing common infrastructure and mocking utilities. - Configured the test project StellaOps.Security.Tests.csproj with necessary dependencies for testing.
This commit is contained in:
76
stryker-config.json
Normal file
76
stryker-config.json
Normal file
@@ -0,0 +1,76 @@
|
||||
{
|
||||
"$schema": "https://raw.githubusercontent.com/stryker-mutator/stryker-net/master/src/Stryker.Core/Stryker.Core/config-schema.json",
|
||||
"stryker-config": {
|
||||
"project-info": {
|
||||
"name": "StellaOps",
|
||||
"module": "",
|
||||
"version": "0.0.1"
|
||||
},
|
||||
"reporters": [
|
||||
"html",
|
||||
"json",
|
||||
"progress"
|
||||
],
|
||||
"thresholds": {
|
||||
"high": 80,
|
||||
"low": 60,
|
||||
"break": 50
|
||||
},
|
||||
"mutation-level": "Standard",
|
||||
"mutators": {
|
||||
"included": [
|
||||
"Arithmetic",
|
||||
"Assignment",
|
||||
"Block",
|
||||
"Boolean",
|
||||
"Checked",
|
||||
"Comparison",
|
||||
"Conditional",
|
||||
"Equality",
|
||||
"Linq",
|
||||
"Logical",
|
||||
"NullCoalescing",
|
||||
"String",
|
||||
"Unary",
|
||||
"Update"
|
||||
]
|
||||
},
|
||||
"coverage-analysis": "perTest",
|
||||
"test-case-filter": "",
|
||||
"diff": false,
|
||||
"baseline": {
|
||||
"enabled": true,
|
||||
"provider": "disk"
|
||||
},
|
||||
"since": {
|
||||
"enabled": false,
|
||||
"target": "main"
|
||||
},
|
||||
"ignore-mutations": [
|
||||
"Statement",
|
||||
"Regex"
|
||||
],
|
||||
"ignore-methods": [
|
||||
"ToString",
|
||||
"GetHashCode",
|
||||
"Equals",
|
||||
"Dispose",
|
||||
"*Async$"
|
||||
],
|
||||
"excluded-files": [
|
||||
"**/Migrations/**/*",
|
||||
"**/Generated/**/*",
|
||||
"**/obj/**/*",
|
||||
"**/bin/**/*",
|
||||
"**/*.Designer.cs"
|
||||
],
|
||||
"concurrency": 4,
|
||||
"language-version": "preview",
|
||||
"verbosity": "info",
|
||||
"report-filename": "mutation-report",
|
||||
"dashboard": {
|
||||
"enabled": false
|
||||
},
|
||||
"output-path": ".stryker/output"
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user