Class SensitiveResponseFieldRule

Namespace

Kuestenlogik.Bowire.Linting.Rules

Assembly

Kuestenlogik.Bowire.dll

Flags a response that carries a field which looks like a credential or secret (password, api key, token, SSN, card number, ...). Returning secrets is a classic data-exposure defect that a schema makes visible before a single request is sent.

public sealed class SensitiveResponseFieldRule : IBowireLintRule

Inheritance

object

SensitiveResponseFieldRule

Implements

IBowireLintRule

Inherited Members

object.GetType()

object.ToString()

object.Equals(object)

object.Equals(object, object)

object.ReferenceEquals(object, object)

object.GetHashCode()

Constructors

SensitiveResponseFieldRule()

public SensitiveResponseFieldRule()

Properties

Id

Stable machine id, e.g. BWR-LINT-MISSING-PAGINATION.

public string Id { get; }

Property Value

string

Severity

The severity every finding from this rule carries.

public BowireLintSeverity Severity { get; }

Property Value

BowireLintSeverity

Title

One-line human title for reports.

public string Title { get; }

Property Value

string

Methods

Inspect(BowireServiceInfo)

Inspect one service and yield any findings.

public IEnumerable<BowireLintFinding> Inspect(BowireServiceInfo service)

Parameters

service BowireServiceInfo

Returns

IEnumerable<BowireLintFinding>