Skip to content

Passive scanner rules version 46
Compare
Choose a tag to compare
@zapbot zapbot released this 03 Mar 14:26
· 4369 commits to main since this release
pscanrules-v46
b5b2051
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Changed

  • The PII Disclosure scan rule:
    • Now includes a solution statement.
    • Now more specifically portrays alert Evidence.
    • Now includes example alert functionality for documentation generation purposes (Issue 6119).
    • Will now only consider PDFs at Low threshold.
  • Maintenance changes.
  • The HeartBleed scan rule alert now includes a CVE tag.
  • Timestamp Disclosure scan rule now excludes values in "RateLimit-Reset", "X-RateLimit-Reset", and "X-Rate-Limit-Reset" headers (Issue 7747).

Fixed

  • The CSP Missing scan rule now alerts when the Content-Security-Policy header is missing, and when the obsolete X-Content-Security-Policy or X-WebKit-CSP are found (Issue 7653).
Assets 3
Loading