Reduce needed steps for JavaScript API test (semi auto or completely auto) about gmapsapiscanner HOT 4 CLOSED

Thanks for useful comments, I am adding auto JavaScript API test checks to my to-do list for the script. Will update this issue once it is done.

from gmapsapiscanner.

On the latest update, I added a new feature which creates the file automatically for manually checking JS API. This would works for the efforts I think and checking with automatically within headless-browser would both need more installation requirements on user & development time with me. So I am closing the ticket since manual confirmation is easy within just opening the file on browser.

from gmapsapiscanner.

@ozguralp As the tool creates automaticaaly a jsapi.html file, I opened it in the browser and it successfully loaded. So should I assume that the API key is vulnerable?? If yes, What will be the impact? can you please guide me?

from gmapsapiscanner.

@ozguralp As the tool creates automaticaaly a jsapi.html file, I opened it in the browser and it successfully loaded. So should I assume that the API key is vulnerable?? If yes, What will be the impact? can you please guide me?

Well it is not well configured for the misuse attacks if it is successfully loaded and you can say it is vulnerable. About the impact, you can read my blog posts referred on the readme section.

from gmapsapiscanner.