Skip to content

Passive scanner rules version 55

Choose a tag to compare

View all tags
@zapbot zapbot released this 26 Jan 09:59
· 4597 commits to main since this release
pscanrules-v55
b3c2f9d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changed

  • The Salvation2 library used by the CSP scan rule has been replaced by htmlunit-csp.
  • The following rules now include example alert functionality for documentation generation purposes (Issue 6119):
    • HTTPS to HTTP Insecure Transition in Form Post
    • HTTP to HTTPS Insecure Transition in Form Post
    • Secure Pages Include Mixed Content
    • User Controllable JavaScript Event (XSS)
    • Cookie without SameSite Attribute
    • X-Debug-Token Information Leak
    • Retrieved from Cache
  • The following scan rules now have alert references (Issue 7100):
    • Cookie without SameSite Attribute
    • Retrieved from Cache (raw text was also trimmed from one Alert reference (Issue 8262))

Fixed

  • An issue where Other Info on alerts for the following rules may have been hard to read (missing spaces or new lines):
    • HTTPS to HTTP Insecure Transition in Form Post
    • HTTP to HTTPS Insecure Transition in Form Post
    • User Controllable JavaScript Event (XSS)
Assets 4
Loading