Merge pull request #88 from PrivateBin/zap-rework-rules

Remove now fixed excluded ZAP rules
This commit is contained in:
El RIDO 2022-03-01 06:47:31 +01:00 committed by GitHub
commit b9f5f0c6cb
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

6
.github/rules.tsv vendored
View file

@ -18,12 +18,6 @@
#
# false-positives
#
# we certainly don't use ASP.NET
# reported: https://github.com/zaproxy/zaproxy/issues/6517
40029 IGNORE (Trace.axd Information Leak)
# this is nginx, not Apache
# reported: https://github.com/zaproxy/zaproxy/issues/6516
10053 IGNORE (Apache Range Header DoS (CVE-2011-3192))
# again we return 200 to some strange URL
90034 IGNORE (Cloud Metadata Potentially Exposed)
40035 IGNORE (Hidden File Found)

Can't render this file because it has a wrong number of fields in line 2.