fix: try/except in _scan_component, serialize_finding to prevent data injection, DRY LLM template, SUPPORTED_ECOSYSTEMS constant
This commit is contained in:
@@ -19,7 +19,7 @@ from ..constants import (
|
||||
from ..db.engine import get_session
|
||||
from ..db.models import Scan
|
||||
from ..db.queries import build_scan_list_query, get_dashboard_stats
|
||||
from ..schemas import ScanDetailOut, ScanListResponse, StatsResponse
|
||||
from ..schemas import ScanDetailOut, ScanListResponse, StatsResponse, serialize_finding
|
||||
|
||||
router = APIRouter(prefix="/api/v1/scans", tags=["scans"])
|
||||
|
||||
@@ -171,5 +171,5 @@ async def get_scan(scan_id: int, session: AsyncSession = Depends(get_session)) -
|
||||
"error_message": scan.error_message,
|
||||
"initiator": scan.initiator,
|
||||
"source_ip": scan.source_ip,
|
||||
"findings": [{"id": f.id, **f.data, "report": f.report} for f in scan.findings],
|
||||
"findings": [serialize_finding(f) for f in scan.findings],
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user