b55d9fa68d
- Implemented InjectionTests.cs to cover various injection vulnerabilities including SQL, NoSQL, Command, LDAP, and XPath injections. - Created SsrfTests.cs to test for Server-Side Request Forgery (SSRF) vulnerabilities, including internal URL access, cloud metadata access, and URL allowlist bypass attempts. - Introduced MaliciousPayloads.cs to store a collection of malicious payloads for testing various security vulnerabilities. - Added SecurityAssertions.cs for common security-specific assertion helpers. - Established SecurityTestBase.cs as a base class for security tests, providing common infrastructure and mocking utilities. - Configured the test project StellaOps.Security.Tests.csproj with necessary dependencies for testing.
77 lines
1.5 KiB
JSON
77 lines
1.5 KiB
JSON
{
|
|
"$schema": "https://raw.githubusercontent.com/stryker-mutator/stryker-net/master/src/Stryker.Core/Stryker.Core/config-schema.json",
|
|
"stryker-config": {
|
|
"project-info": {
|
|
"name": "StellaOps",
|
|
"module": "",
|
|
"version": "0.0.1"
|
|
},
|
|
"reporters": [
|
|
"html",
|
|
"json",
|
|
"progress"
|
|
],
|
|
"thresholds": {
|
|
"high": 80,
|
|
"low": 60,
|
|
"break": 50
|
|
},
|
|
"mutation-level": "Standard",
|
|
"mutators": {
|
|
"included": [
|
|
"Arithmetic",
|
|
"Assignment",
|
|
"Block",
|
|
"Boolean",
|
|
"Checked",
|
|
"Comparison",
|
|
"Conditional",
|
|
"Equality",
|
|
"Linq",
|
|
"Logical",
|
|
"NullCoalescing",
|
|
"String",
|
|
"Unary",
|
|
"Update"
|
|
]
|
|
},
|
|
"coverage-analysis": "perTest",
|
|
"test-case-filter": "",
|
|
"diff": false,
|
|
"baseline": {
|
|
"enabled": true,
|
|
"provider": "disk"
|
|
},
|
|
"since": {
|
|
"enabled": false,
|
|
"target": "main"
|
|
},
|
|
"ignore-mutations": [
|
|
"Statement",
|
|
"Regex"
|
|
],
|
|
"ignore-methods": [
|
|
"ToString",
|
|
"GetHashCode",
|
|
"Equals",
|
|
"Dispose",
|
|
"*Async$"
|
|
],
|
|
"excluded-files": [
|
|
"**/Migrations/**/*",
|
|
"**/Generated/**/*",
|
|
"**/obj/**/*",
|
|
"**/bin/**/*",
|
|
"**/*.Designer.cs"
|
|
],
|
|
"concurrency": 4,
|
|
"language-version": "preview",
|
|
"verbosity": "info",
|
|
"report-filename": "mutation-report",
|
|
"dashboard": {
|
|
"enabled": false
|
|
},
|
|
"output-path": ".stryker/output"
|
|
}
|
|
}
|