Skip to content

Commit 9678048

Browse files
committed
ascanrules: Reflected XSS introduce param object
To facilitate further modifications and refactoring. - CHANGELOG > Added maintenance note. - CrossSiteScriptingScanRule > Introduce and leverage new param object. - HtmlContextAnalyser > Throw an exception if the target param is empty as that leads to an infinite loop. Signed-off-by: kingthorin <[email protected]>
1 parent cf0d606 commit 9678048

File tree

3 files changed

+253
-194
lines changed

3 files changed

+253
-194
lines changed

addOns/ascanrules/CHANGELOG.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
1515
- SQL Injection scan rule to start using ComparableResponse - part of the work to reduce False Positives.
1616
- Depends on an updated version of the Common Library add-on.
1717
- Due to it being 2025 and the mass adoption of HTTPS: De-prioritized plain HTTP payloads in the External Redirect scan rule.
18+
- Maintenance changes.
1819

1920
### Fixed
2021
- SQL Injection scan rule to treat a 500 response to an SQLi attack as a likely vulnerability.

0 commit comments

Comments
 (0)