Class: Contrast::Agent::Assess::Rule::Response::BaseRule

Inherits:
Object
  • Object
show all
Defined in:
lib/contrast/agent/assess/rule/response/base_rule.rb

Overview

These rules check the content of the HTTP Response to determine if something was set incorrectly or insecurely in it.

Direct Known Subclasses

AutoComplete, HeaderRule, ParametersPollution

Constant Summary collapse

DATA = 
'data'.cs__freeze

Instance Method Summary collapse

Instance Method Details

#analyze(response) ⇒ Object

Analyze a given application response to determine if it violates the rule

TODO: RUBY-999999 either extract the response's body or memoize it to some degree so that it's not generated on every call of this method

Parameters:

  • the response of the application



24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
 
# File 'lib/contrast/agent/assess/rule/response/base_rule.rb', line 24

def analyze response
  return unless analyze_response?(response)

  violation = violated?(response)
  return unless violation

  finding = build_finding(violation)
  return unless finding

  preflight = Contrast::Agent::Reporting::BuildPreflight.generate(finding)
  return unless preflight

  Contrast::Agent::Reporting::ReportingStorage[preflight.messages[0].data] = finding
  Contrast::Agent.reporter&.send_event(preflight)
end