Active scanner rules version 47

Added

• Cross Site Scripting header splitting attacks.
• The External Redirect scan rule now includes alert references on Alerts, and has example alert functionality for documentation generation purposes.

Changed

• Maintenance changes.
• Updated the External Redirect scan rule to be more accurate.
• The Reflected XSS scan rule now generates alerts for all content-types when alert threshold set to LOW. If alert threshold MEDIUM or HIGH, alerts are raised for HTML responses only.

Fixed

• The Remote File Inclusion scan rule no longer follows redirects before checking the response for content indicating a vulnerability (Issue 5887).
• False positive where Cross Site Scripting payloads are safely rendered in a textarea tag.
• Unescaped tag end causing Cross Site Scripting rule to throw an exception.