Active scanner rules version 50

Changed

• The Directory Browsing scan rule now includes example alert functionality for documentation generation purposes (Issue 6119).
• Use lower case HTTP field names for compatibility with HTTP/2.
• Maintenance changes.

Fixed

• False positive in case of javascript: protocol xss attacks, when attack payload is modified by the application (Issue 6013).
• Preserve the HTTP version in the scan rules:
  • Remote Code Execution - CVE-2012-1823
  • Source Code Disclosure - CVE-2012-1823
  • Source Code Disclosure - /WEB-INF folder

Added

• The Hidden File Finder scan rule will now also check for "/_wpeprivate/config.json".