diff --git a/iast/views/vul_details.py b/iast/views/vul_details.py index 4330f202..5b239b5c 100644 --- a/iast/views/vul_details.py +++ b/iast/views/vul_details.py @@ -237,9 +237,9 @@ def get_vul(self, auth_agents): 'req_header': htmlescape(self.parse_request(vul.http_method, vul.uri, vul.req_params, vul.http_protocol, vul.req_header, - vul.req_data)), + vul.req_data)) if is_need_http_detail(strategy_name) else '', 'response': - htmlescape(self.parse_response(vul.res_header, vul.res_body)), + htmlescape(self.parse_response(vul.res_header, vul.res_body)) if is_need_http_detail(strategy_name) else '', 'graph': self.parse_graphy(vul.full_stack), 'context_path': @@ -251,11 +251,12 @@ def get_vul(self, auth_agents): 'taint_value': vul.taint_value, 'param_name': - json.loads(vul.param_name) if vul.param_name else {}, + parse_param_name(vul.param_name) if vul.param_name else {}, 'method_pool_id': vul.method_pool_id, 'project_id': - project_id + project_id, + 'is_need_http_detail': is_need_http_detail(strategy_name), } def get_strategy(self): @@ -368,6 +369,15 @@ def htmlescape(string): "6350be97a65823fc42ddd9dc78e17ddf13ff693b", "") +def is_need_http_detail(name): + return False if name in ['硬编码'] else True + +def parse_param_name(param_name): + try: + res = json.dumps(param_name) + return res + except: + return {} if __name__ == '__main__': vul = VulDetail()