Skip to content

Add new HTTP authentication variables to API Fuzzing template

Michael Eddington requested to merge 227721-add-httpbasic-apifuzzing into master

What does this MR do?

Pass two new variables to the API Fuzzing scanner container required for supporting HTTP Basic authentication. The new variables are FUZZAPI_HTTP_USERNAME and FUZZAPI_HTTP_PASSWORD.

The parameters are optional and validated inside the container.

Addresses #227721 (closed)

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • [-] Label as security and @ mention @gitlab-com/gl-security/appsec
  • [-] The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • [-] Security reports checked/validated by a reviewer from the AppSec team
Edited by Michael Eddington

Merge request reports