Skip to content

Tags: stoplightio/spectral-owasp-ruleset

Tags

v2.0.1

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
fix: use tostring to match url (#64)

* fix: owasp:api7:2023-concerning-url-parameter rule

v2.0.0

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
feat: support for OWASP 2023 (#62)

BREAKING CHANGE: Adds/Removes rule to cater for OWASP 2023 top 10 list

v1.4.4

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Change `oneOf` to `anyOf` schema in owasp:api4:2019-string-restricted…

… and owasp:api4:2019-string-limit (#43)

* Change `oneOf` to `anyOf` schema in owasp:api4:2019-string-restricted

The use of `oneOf` means that _only_ one of the schema constraints may be true,
but it is valid if two or more of the string schema constraint keywords
are present: `format`, `pattern`, `enum`, `const`.

* Change `oneOf` to `anyOf` schema in owasp:api4:2019-string-limit

Similar as with `2019-string-restricted`: the schema check should be
`anyOf` instead of `oneOf` in case a schema has more than one of the
keywords.

v1.4.3

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
fix: do not warn if an operation defines 400 and 422 responses (#38)

In `src/ruleset.ts`, change the `oneOf` schema to `anyOf`

Add test cases in `__tests__/owasp-api3-2019-define-error-validation.test.ts`:
  * test with both `400` and `422`
  * test with `4XX`

Co-authored-by: Nauman <mnaumanali94@gmail.com>

v1.4.2

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
fix: tweak jsonpath expeession (#40)

Update ruleset.ts

v1.4.1

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
fix: module.exports present in ESM bundle (#39)

v1.4.0

test: coverd owasp:api6:2019-no-additionalProperties

v1.3.0

feat: 500 messages now require content too

v1.2.2

fix: update spectral functions and types

v1.2.1

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
fix: improve the type array lookup (#20)