Skip to content

Passive scanner rules (beta) version 21

Choose a tag to compare

View all tags
@github-actions github-actions released this 16 Dec 16:03
pscanrulesBeta-v21
ac1e066
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Added

  • The following scan rules were added being promoted from Alpha to Beta:
    • Big Redirect Detected (Potential Sensitive Information Leak)
    • Content Security Policy (CSP) Header Not Set
    • Cookie Poisoning
    • Directory Browsing
    • Hash Disclosure
    • Heartbleed OpenSSL Vulnerability (Indicative)
    • HTTP Server Response Header Scanner
    • HTTP to HTTPS Insecure Transition in Form Post
    • HTTPS to HTTP Insecure Transition in Form Post
    • Open Redirect
    • PII Scanner
    • Retrieved from Cache
    • Reverse Tabnabbing
    • Strict-Transport-Security Header Scanner
    • User Controllable Charset
    • User Controllable HTML Element Attribute (Potential XSS)
    • User Controllable JavaScript Event (XSS)
    • X-Backend-Server Header Information Leak
    • X-ChromeLogger-Data (XCOLD) Header Information Leak

Removed

  • The following scan rules were removed in being promoted Beta to Release:
    • Cookie Without SameSite Attribute
    • Cross Domain Misconfiguration
    • Information Disclosure: In URL
    • Information Disclosure: Referrer
    • Information Disclosure: Suspicious Comments
    • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s)
    • Timestamp Disclosure
    • Username Hash Found
    • X-AspNet-Version Response Header Scanner
    • X-Debug-Token Information Leak
Assets 3
Loading