Skip to content

Passive scanner rules (alpha) version 24

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Jun 10:42
pscanrulesAlpha-v24
This tag was signed with the committer’s verified signature.
thc202
GPG key ID: F29DBD3500548AA2
Verified
Learn about vigilant mode.
b53f2d1
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.
  • PiiScanner add word boundary checks to reduce false positives.
  • HashDisclosureScanner prevent false positives on obvious jsessionid values (Issue 5215).
  • Remove Cookie Same Site Scanner (promoted to beta Issue 4464).
  • Remove Cross Domain Misconfiguration Scanner (promoted to beta Issue 4465).
  • Remove Timestamp Scanner (promoted to beta Issue 4466).
  • Remove Username IDOR Scanner (promoted to beta Issue 4467).
  • Remove X AspNet Version Scanner (promoted to beta Issue 4468).
  • Remove X Debug Token Scanner (promoted to beta Issue 4469).
  • Remove X PoweredBy Scanner (promoted to beta Issue 4470).
  • Add scanner for missing Feature Policy header.
  • Report source code disclosure alerts at Medium instead of High
Assets 3
Loading