- Implemented InjectionTests.cs to cover various injection vulnerabilities including SQL, NoSQL, Command, LDAP, and XPath injections. - Created SsrfTests.cs to test for Server-Side Request Forgery (SSRF) vulnerabilities, including internal URL access, cloud metadata access, and URL allowlist bypass attempts. - Introduced MaliciousPayloads.cs to store a collection of malicious payloads for testing various security vulnerabilities. - Added SecurityAssertions.cs for common security-specific assertion helpers. - Established SecurityTestBase.cs as a base class for security tests, providing common infrastructure and mocking utilities. - Configured the test project StellaOps.Security.Tests.csproj with necessary dependencies for testing.
13 lines
157 B
JSON
13 lines
157 B
JSON
{
|
|
"version": 1,
|
|
"isRoot": true,
|
|
"tools": {
|
|
"dotnet-stryker": {
|
|
"version": "4.4.0",
|
|
"commands": [
|
|
"stryker"
|
|
]
|
|
}
|
|
}
|
|
}
|