feat(scan): add "Broken Object Level Authorization" scan test (#483)

Closes #482
NeuraLegion · Oct 20, 2023 · 7c37a45 · 7c37a45
1 parent 54a0dc5
commit 7c37a45
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/Scan/Scans.ts b/src/Scan/Scans.ts
@@ -19,6 +19,7 @@ export enum AttackParamLocation {
 export enum TestType {
   ANGULAR_CSTI = 'angular_csti',
   BACKUP_LOCATIONS = 'backup_locations',
+  BOLA = 'bola',
   BROKEN_SAML_AUTH = 'broken_saml_auth',
   BRUTE_FORCE_LOGIN = 'brute_force_login',
   BUSINESS_CONSTRAINT_BYPASS = 'business_constraint_bypass',
@@ -79,6 +80,7 @@ export enum TestType {
 
 export const EXPENSIVE_TESTS: readonly TestType[] = [
   TestType.BUSINESS_CONSTRAINT_BYPASS,
+  TestType.BOLA,
   TestType.CVE,
   TestType.DATE_MANIPULATION,
   TestType.EXCESSIVE_DATA_EXPOSURE,