WI & WIE Reporting Format - XML
Hi WebInspect experts out there,
Could anyone please advise what is the XML version being used by WebInspect standalone and WebInspect Enterprise 19.2 & 20.1 ?
I noticed that the XML report formatting is different between the standalone and enterprise version. Understand that XML report format generated from WIE is XML 1.0, but I am not too sure what version is the XML format generated from WI standalone.
Attaching the XML report comparison (Left: WIE; Right: WI)
You are correct. The XML format of a scan exported from WIE is different from WI. As mentioned, we do not include an XML declaration in the XML exported from WI.
We do use use System.Xml.XmlWriter Create (System.IO.Stream output, System.Xml.XmlWriterSettings settings);. According to MS docs, XMLWriter writes XML 1.0 text syntax.
As this is different code (between WIE and WI) it is possible one team set a declaration flag and the other did not. With XML declarations are optional. If you are seeing this as a problem for automation, my recommendation would be to open a ticket with support and we can bring this up with development.
Thanks eBell for your explaination!
Yes it does confuse our reporting automation where we integrate it to Kenna Security. We tried to use XMLLint tool to validate the XML code from both, only WIE one is showing error, while WI one looks all good.
Also, our reporting tool, Kenna Security recognized the format from WIE as invalid but only accept the format from WI.
Interesting that your WIE XML is providing formatting errors as I'm not able to reproduce this using XMLLint.
How are you exporting your scan to XML? I used the WIE API. Attached is a copy of the resulting XML file.
What version/build of WIE are you using?
Thanks for your reply. I was following the Path below to generate report: Select scan > 'Export' > 'Export Scan as XML' in WIE 19.20.
I am interested to know how did you generate it from WIE API?