Checklists and Merged IDs

[ThunderSon]

Should we keep the IDs as normal for tests that are now merged or removed?

Maybe we can set a placeholder instead, or have a special value that we can parse for later terms.

WSTG-INFO-09 is set twice, I am guessing there's a typo, just making sure it wasn't set specifically.

[kingthorin]

I think that must be a parsing issue due to: https://github.com/OWASP/wstg/blob/master/document/4-Web_Application_Security_Testing/01-Information_Gathering/09-Fingerprint_Web_Application.md

Uh, where are you seeing INFO-09 twice?
https://github.com/OWASP/wstg/blob/master/checklist/checklist.json seems fine...

[kingthorin]

It does seem to be a typo. The placeholders should be left for the time being (IMHO).

(The first of each set should be INFO-08.)

I guess since both of these artifacts are manually created/maintained we could replace the heading column entry with Retired see WSTG-INFO-08, or something like that. So that it was kinda like:

ID	Description
WSTG-INFO-08	Fingerprint Web Application Framework
WSTG-INFO-09	Retired see WSTG-INFO-08

Or whatever the appropriate note is. (I think there's one other place there's a placeholder currently.)

Update: Oh I guess there's three:

[ThunderSon]

There's the Buffer Overflow one as well, INPV-13. That solution sounds fair, changing the description, but that won't be replicated in the JSON sadly. That's what I meant by setting a certain "value" that we can parse based on it.
If "value" is set, grab the referenced test in the md file and set the known description for merged tests.

[kingthorin]

Ya if there's some sort of element we want to set on those placeholder pages I'm good with that.

[ThunderSon]

@rejahrehim What do you feel about this?
This is not as well a pre-requirement for v4.2, so no big rush. We'll just update the typos in the checklists for now

[rejahrehim]

Yes. We could keep a common heading which I could parse. If So, we can update the checklist with it.
Also, We should keep a specific format in the checklist to identify expired test cases. Like Expired since v4.2

[github-actions]

Please comment if you are still working on this issue, as it has been inactive for 30 days. To give everyone a chance to contribute, we are releasing it to new contributors.

[github-actions]

Please comment if you are still working on this issue, as it has been inactive for 30 days. To give everyone a chance to contribute, we are releasing it to new contributors.

[github-actions]

Please comment if you are still working on this issue, as it has been inactive for 30 days. To give everyone a chance to contribute, we are releasing it to new contributors.