Basic modules are run on path state nodes. A basic module can obtain the object storing information about the path state node from the context object.
Returns the IWebPath object representing the path of the path state node.
Returns false if the path state node is a directory or file. Returns true if the path state node corresponds to a parameter for another path state node.
This returns true if the path state node is a known directory.
Returns true if the current path state node is the root path (e.g. /).
Returns a org.apache.http.NameValuePair object storing the parameter name and value associated with the path state node.
Creating the Original Request for the Path State Node
It is possible to obtain a request object identical to the one that was first sent by Vega when the path state node was created.
Cross-Site Scripting Methods
Allocates an integer for a unique XSS string.
String ps.createXssTag(xid) String ps.createXssTag(String prefix, int Xid)
These two methods create the XSS injection string. A string value can be prepended to the XSS injection string if passed as the prefix parameter.
void ps.registerXssRequest(Request req, int xid)
Once an altered request has been created via ps.createdAlteredRequest, it must be registered. This function will register the Request and the integer associated with the XSS.
Creating an Altered Request for the Path State Node
ps.createAlteredRequest(String value, boolean append)
Creates an altered request with "value" as the fuzz value.
- If the path state node represents a parameter, "value" will either replace or be appended to the parameter.
- If the path state node is a directory, "value" will be added to the end of the path.
Obtaining the Path Fingerprint
The fingerprint of the response from the original request sent for the path state node can be obtained and used for comparison within a module:
Have feedback on Vega? Our documentation? Please tell us.