Skip to content

Commit b022c94

Browse files
committed
ascanrules: Reflected XSS introduce param object
To facilitate further modifications and refactoring. - CHANGELOG > Added maintenance note. - CrossSiteScriptingScanRule > Introduce and leverage new param object. - HtmlContextAnalyser > Throw an exception if the target param is empty as that leads to an infinite loop. Signed-off-by: kingthorin <[email protected]>
1 parent ba836c5 commit b022c94

File tree

3 files changed

+253
-194
lines changed

3 files changed

+253
-194
lines changed

addOns/ascanrules/CHANGELOG.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
1212
- SQL Injection scan rule to start using ComparableResponse - part of the work to reduce False Positives.
1313
- Depends on an updated version of the Common Library add-on.
1414
- Due to it being 2025 and the mass adoption of HTTPS: De-prioritized plain HTTP payloads in the External Redirect scan rule.
15+
- Maintenance changes.
1516

1617
### Fixed
1718
- SQL Injection scan rule to treat a 500 response to an SQLi attack as a likely vulnerability.

0 commit comments

Comments
 (0)