|
| 1 | +<?xml version="1.0" encoding="UTF-8"?><record_update table="scan_column_type_check"> |
| 2 | + <scan_column_type_check action="INSERT_OR_UPDATE"> |
| 3 | + <active>true</active> |
| 4 | + <category>manageability</category> |
| 5 | + <column_type>script</column_type> |
| 6 | + <description>GlideLDAP API is Unsupported and should be avoided to query the LDAP server</description> |
| 7 | + <documentation_url>https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0961314</documentation_url> |
| 8 | + <finding_type>scan_finding</finding_type> |
| 9 | + <name>Unsupported API : GlideLDAP</name> |
| 10 | + <priority>3</priority> |
| 11 | + <resolution_details>GlideLDAP API usage is unsupported by ServiceNow and hence should be avoided, rather use LDAP Server Data Sources to pull data from LDAP via MID Server or directly through an internet facing LDAP</resolution_details> |
| 12 | + <run_condition/> |
| 13 | + <score_max>100</score_max> |
| 14 | + <score_min>0</score_min> |
| 15 | + <score_scale>1</score_scale> |
| 16 | + <script><![CDATA[(function(engine) { |
| 17 | + //avoid the skip tables |
| 18 | + var skip_tables = "sys_script_execution_history"; |
| 19 | + if (skip_tables.indexOf(engine.current.getTableName()) > -1) |
| 20 | + return; |
| 21 | +
|
| 22 | + //check glide ldap usage at least once |
| 23 | + var search_regex = /new\s*GlideLDAP\s*\(/; |
| 24 | + if (!search_regex.test(engine.columnValue)) |
| 25 | + return; |
| 26 | +
|
| 27 | + //remove code comments |
| 28 | + var code_comments_regex = /\/\*[\s\S]*?\*\/|([^:]|^)\/\/.*$/gm; |
| 29 | + var commentsRemovedValue = engine.columnValue.replace(code_comments_regex, ''); |
| 30 | +
|
| 31 | + //raise finding if no comments found or usage found in commentsRemovedValue |
| 32 | + if (commentsRemovedValue.length == engine.columnValue.length || search_regex.test(commentsRemovedValue)) |
| 33 | + engine.finding.increment(); |
| 34 | +
|
| 35 | +})(engine);]]></script> |
| 36 | + <short_description>GlideLDAP API is Unsupported and should be avoided to query the LDAP server</short_description> |
| 37 | + <sys_class_name>scan_column_type_check</sys_class_name> |
| 38 | + <sys_created_by>admin</sys_created_by> |
| 39 | + <sys_created_on>2023-10-31 17:25:20</sys_created_on> |
| 40 | + <sys_id>c5493fd897523110839d76021153afb8</sys_id> |
| 41 | + <sys_mod_count>0</sys_mod_count> |
| 42 | + <sys_name>Unsupported API : GlideLDAP</sys_name> |
| 43 | + <sys_package display_value="Example Instance Checks" source="x_appe_exa_checks">ca8467c41b9abc10ce0f62c3b24bcbaa</sys_package> |
| 44 | + <sys_policy/> |
| 45 | + <sys_scope display_value="Example Instance Checks">ca8467c41b9abc10ce0f62c3b24bcbaa</sys_scope> |
| 46 | + <sys_update_name>scan_column_type_check_c5493fd897523110839d76021153afb8</sys_update_name> |
| 47 | + <sys_updated_by>admin</sys_updated_by> |
| 48 | + <sys_updated_on>2023-10-31 17:25:20</sys_updated_on> |
| 49 | + </scan_column_type_check> |
| 50 | +</record_update> |
0 commit comments