Drupal JSON:API user listing template

2022-07-21 22:05:18 -04:00 · 2022-07-21 22:05:18 -04:00 · ff5e432186
parent a6b685a4a1
commit ff5e432186
1 changed files with 20 additions and 0 deletions
--- a/exposures/apis/drupal-jsonapi-user-listing.yaml
+++ b/exposures/apis/drupal-jsonapi-user-listing.yaml
@ -0,0 +1,20 @@
+id: drupal-jsonapi-user-listing
+
+info:
+  name: Drupal JSON:API User Listing
+  author: lixts
+  severity: medium
+  reference:
+    - https://www.drupal.org/project/drupal/issues/3240913
+  tags: drupal,exposure
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/jsonapi/user/user"
+
+    matchers:
+      - type: regex
+        part: body
+        regex:
+          - '"display_name":"'