Merge pull request #75 from hahwul/dev

Dev
owasp-noir · Sep 5, 2023 · af80b07 · af80b07
2 parents e8cbf40 + 5f14afc
commit af80b07
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 2 deletions.
diff --git a/spec/functional_test/testers/go_gin_spec.cr b/spec/functional_test/testers/go_gin_spec.cr
@@ -10,9 +10,10 @@ extected_endpoints = [
     Param.new("password", "", "form"),
     Param.new("User-Agent", "", "header"),
   ]),
+  Endpoint.new("/public/secret.html", "GET"),
 ]
 
 FunctionalTester.new("fixtures/go_gin/", {
   :techs     => 1,
-  :endpoints => 2,
+  :endpoints => 3,
 }, extected_endpoints).test_all
diff --git a/src/analyzer/analyzers/analyzer_go_gin.cr b/src/analyzer/analyzers/analyzer_go_gin.cr
@@ -20,7 +20,7 @@ class AnalyzerGoGin < Analyzer
               end
             end
 
-            ["Query", "PostForm", "GetHeader", "Static"].each do |pattern|
+            ["Query", "PostForm", "GetHeader"].each do |pattern|
               if line.includes?("#{pattern}(")
                 get_param(line).tap do |param|
                   if param.name.size > 0 && last_endpoint.method != ""
@@ -29,6 +29,14 @@ class AnalyzerGoGin < Analyzer
                 end
               end
             end
+
+            if line.includes?("Static(")
+              get_static_path(line).tap do |static_path|
+                if static_path["static_path"].size > 0 && static_path["file_path"].size > 0
+                  public_dirs << static_path
+                end
+              end
+            end
           end
         end
       end