Skip to content

Passive scanner rules version 68

Choose a tag to compare

View all tags
@zapbot zapbot released this 21 Oct 13:29
· 1524 commits to main since this release
pscanrules-v68
636f371
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • SYSTEMIC tag to selected rules.

Changed

  • Update dependency.
  • The PII Disclosure scan rule now only evaluates visible text and script blocks in HTML responses at Medium or High alert threshold, while the entire response body is considered at Low alert threshold. To further prevent false positives at Medium or High alert threshold candidate strings with underscore are excluded.
  • Depends on an updated version of the Common Library add-on.

Fixed

  • ZAP is Out of Date rule to not trigger a CFU request in silent mode (Issue 9096).
Assets 4
Loading