
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
API Tests Using n3 Rules
Follow platform-specific instructions to install locally oor in a docker image.
To run api-tuner
in GitHub workflow, you add this action to your jobs:
- uses: fabasoad/setup-prolog-action@v1
curl 7.83+
npm i api-tuner
> api-tuner --help
Usage: api-tuner [options] <path>...
Options:
--lib <path> Specify rules to include in all tests. Can be used multiple times. Make sure to surround globs in quotes to prevent expansion.
--silent Less output
--debug Enable debug output
--raw Output raw results from eye
--base-iri <iri> Specify the base IRI for parsing the test case files
--version Show version information
--help Show this help message
Create a test case file test.n3
:
# test.n3
PREFIX : <http://example.com/>
PREFIX earl: <http://www.w3.org/ns/earl#>
PREFIX tuner: <https://api-tuner.described.at/>
PREFIX rdfs: <http://www.w3.org/2000/01/rdf-schema#>
PREFIX log: <http://www.w3.org/2000/10/swap/log#>
PREFIX string: <http://www.w3.org/2000/10/swap/string#>
<#getExampleDotCom>
a earl:TestCase ;
rdfs:label "Simple GET test" ;
.
# Configure a request
_:req
a tuner:Request ;
tuner:url <http://localhost:1080/example.com> ;
tuner:method "GET" ;
.
{
# Execute the request and capture its response
_:req tuner:response ?res .
# Check the response status code and content type
?res tuner:http_code 200 ;
tuner:header ( "content-type" "text/html" ) ;
.
# Check the body contains the work "Example"
?res!tuner:body string:contains "Example Domain" .
} => {
# Use te EARL vocabulary to assert the test passed
<#getExampleDotCom> earl:outcome earl:passed .
} .
Execute the test case:
api-tuner test.n3
TBD
FAQs
**API** **T**ests **U**sing **n3** **R**ules
The npm package api-tuner receives a total of 0 weekly downloads. As such, api-tuner popularity was classified as not popular.
We found that api-tuner demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.