Skip to content

On Demand Scans use Browser Based Analyzer

Arpit Gogia requested to merge 430191-browser-based-ods into master

What does this MR do and why?

  • On Demand Scans will use the browser based analyzer when the feature flag dast_ods_browser_based_scanner is turned on
    • Adds the feature flag
    • Adds the DAST_BROWSER_SCAN CI variable to the On Demand Scan CI job when the feature flag is on. Also removes DAST_USE_AJAX_SPIDER since it conflicts with the former.

Related Issue: Modify DAST On Demand Scan CI Configuration to ... (#430191 - closed)

Screenshots or screen recordings

Adds the CI variable

Screenshot 2023-12-04 at 2.13.38 PM.png

Browserker is used when the feature flag is on

image.png

How to set up and validate locally

  1. Setup GDK
  2. Turn on the feature flag from Rails console Feature.enable(:dast_ods_browser_based_scanner)
  3. Try to run a new On Demand Scan (Secure -> On Demand Scans)

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #430191 (closed)

Merge request reports