Update and rename exposures/configs/package-json.yaml to http/exposures/configs/package-json.yaml

patch-1
Dhiyaneshwaran 2023-07-04 09:22:19 +05:30 committed by GitHub
parent b597063a39
commit a9fc298b62
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 4 deletions

View File

@ -1,20 +1,25 @@
id: package-json id: package-json
info: info:
name: npm package.json disclosure name: NPM package.json Disclosure
author: geeknik,afaq,noraj author: geeknik,afaq,noraj
severity: info severity: info
description: All NodeJS packages contain a file, usually in the project root, called package.json - this file holds various metadata relevant to the project generated by package managers such as npm, yarn, pnpm. description: |
All NodeJS packages contain a file, usually in the project root, called package.json - this file holds various metadata relevant to the project generated by package managers such as npm, yarn, pnpm.
reference: reference:
- https://docs.npmjs.com/cli/v9/configuring-npm/package-json - https://docs.npmjs.com/cli/v9/configuring-npm/package-json
- https://classic.yarnpkg.com/lang/en/docs/package-json/ - https://classic.yarnpkg.com/lang/en/docs/package-json/
- https://pnpm.io/package_json - https://pnpm.io/package_json
tags: config,exposure metadata:
max-request: 2
verified: true
tags: config,exposure,node,npm
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/package.json" - "{{BaseURL}}/package.json"
- "{{BaseURL}}/package-lock.json"
matchers-condition: and matchers-condition: and
matchers: matchers:
@ -25,9 +30,9 @@ requests:
condition: and condition: and
- type: word - type: word
part: header
words: words:
- "application/json" - "application/json"
part: header
- type: status - type: status
status: status: