Skip to content

Passive scanner rules (alpha) version 36

Choose a tag to compare

View all tags
@zapbot zapbot released this 16 Sep 15:08
· 6888 commits to main since this release
pscanrulesAlpha-v36
a5f8657
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Changed

  • Update minimum ZAP version to 2.11.1.
  • Maintenance changes.
  • Sub Resource Integrity Attribute Missing scan rule now supports Trusted Domains.
  • The Base64 Disclosure scan rule will now ignore headers which are known to contain irrelevant Base64 like strings or are covered by other rules (ETag, Authorization, X-ChromeLogger-Data, X-ChromePhp-Data) (Issue 6619).
  • Added new Custom Payloads alert tag to the example alerts of the Dangerous JS Function scan rule.
  • Permissions Policy scan rule updated for consistency and documentation purposes (Issue 7458).

Fixed

  • False positive condition from Sub Resource Integrity Attribute Missing scan rule when rel=canonical is used (Issue 7040).
  • Threading issue in Dangerous JS Functions rule - only reproducible with currently unreleased core changes.
Assets 3
Loading