attack_builder.py 文件源码

def _render_url_params(endpoint: APITestEndPoint, template: Template, payload_content: dict):
    """
    Generates tests for parameters with information in URL, like:

        wwww.mysite.com/index.php?id=1&page=abc

    This function will generate tests for params:
    - id
    - page
    """
    content_type = APITestContentType(endpoint.request.body.content_type).value
    url = endpoint.request.url

    scheme, netloc, url, params, query, fragment = urlparse(url)

    base_url = urljoin("%s://%s" % (scheme, netloc), url)
    url_params = form_content2dict(query) if len(query) != 0 else {}

    template.render(url=base_url,
                    method=endpoint.request.method,
                    content_type=content_type,
                    body_content=endpoint.request.body.value,
                    url_params=url_params,
                    payloads=payload_content)