public sealed class Finding : IMessage<Finding>, IEquatable<Finding>, IDeepCloneable<Finding>, IBufferMessage, IMessage
A Finding resource represents a vulnerability instance identified during a ScanRun.
Implements
IMessage<Finding>, IEquatable<Finding>, IDeepCloneable<Finding>, IBufferMessage, IMessageNamespace
Google.Cloud.WebSecurityScanner.V1Assembly
Google.Cloud.WebSecurityScanner.V1.dll
Constructors
Finding()
public Finding()
Finding(Finding)
public Finding(Finding other)
Type | Name | Description |
---|---|---|
Finding | other |
Properties
Body
public string Body { get; set; }
Output only. The body of the request that triggered the vulnerability.
Type | Description |
---|---|
String |
Description
public string Description { get; set; }
Output only. The description of the vulnerability.
Type | Description |
---|---|
String |
FinalUrl
public string FinalUrl { get; set; }
Output only. The URL where the browser lands when the vulnerability is detected.
Type | Description |
---|---|
String |
FindingName
public FindingName FindingName { get; set; }
FindingName-typed view over the Name resource name property.
Type | Description |
---|---|
FindingName |
FindingType
public string FindingType { get; set; }
Output only. The type of the Finding. Detailed and up-to-date information on findings can be found here: https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings
Type | Description |
---|---|
String |
Form
public Form Form { get; set; }
Output only. An addon containing information reported for a vulnerability with an HTML form, if any.
Type | Description |
---|---|
Form |
FrameUrl
public string FrameUrl { get; set; }
Output only. If the vulnerability was originated from nested IFrame, the immediate parent IFrame is reported.
Type | Description |
---|---|
String |
FuzzedUrl
public string FuzzedUrl { get; set; }
Output only. The URL produced by the server-side fuzzer and used in the request that triggered the vulnerability.
Type | Description |
---|---|
String |
HttpMethod
public string HttpMethod { get; set; }
Output only. The http method of the request that triggered the vulnerability, in uppercase.
Type | Description |
---|---|
String |
Name
public string Name { get; set; }
Output only. The resource name of the Finding. The name follows the format of 'projects/{projectId}/scanConfigs/{scanConfigId}/scanruns/{scanRunId}/findings/{findingId}'. The finding IDs are generated by the system.
Type | Description |
---|---|
String |
OutdatedLibrary
public OutdatedLibrary OutdatedLibrary { get; set; }
Output only. An addon containing information about outdated libraries.
Type | Description |
---|---|
OutdatedLibrary |
ReproductionUrl
public string ReproductionUrl { get; set; }
Output only. The URL containing human-readable payload that user can leverage to reproduce the vulnerability.
Type | Description |
---|---|
String |
Severity
public Finding.Types.Severity Severity { get; set; }
Output only. The severity level of the reported vulnerability.
Type | Description |
---|---|
Finding.Types.Severity |
TrackingId
public string TrackingId { get; set; }
Output only. The tracking ID uniquely identifies a vulnerability instance across multiple ScanRuns.
Type | Description |
---|---|
String |
ViolatingResource
public ViolatingResource ViolatingResource { get; set; }
Output only. An addon containing detailed information regarding any resource causing the vulnerability such as JavaScript sources, image, audio files, etc.
Type | Description |
---|---|
ViolatingResource |
VulnerableHeaders
public VulnerableHeaders VulnerableHeaders { get; set; }
Output only. An addon containing information about vulnerable or missing HTTP headers.
Type | Description |
---|---|
VulnerableHeaders |
VulnerableParameters
public VulnerableParameters VulnerableParameters { get; set; }
Output only. An addon containing information about request parameters which were found to be vulnerable.
Type | Description |
---|---|
VulnerableParameters |
Xss
public Xss Xss { get; set; }
Output only. An addon containing information reported for an XSS, if any.
Type | Description |
---|---|
Xss |