nune/privatebin-docker-nginx-fpm-alpine
nune/privatebin-docker-nginx-fpm-alpine
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 3

Merge pull request #88 from PrivateBin/zap-rework-rules

Browse source 
Remove now fixed excluded ZAP rules
This commit is contained in:
El RIDO 2022-03-01 06:47:31 +01:00 • committed by GitHub
commit b9f5f0c6cb
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

6
.github/rules.tsv vendored
View file

@ -18,12 +18,6 @@
# #
# false-positives # false-positives
# #
# we certainly don't use ASP.NET
# reported: https://github.com/zaproxy/zaproxy/issues/6517
40029 IGNORE (Trace.axd Information Leak)
# this is nginx, not Apache
# reported: https://github.com/zaproxy/zaproxy/issues/6516
10053 IGNORE (Apache Range Header DoS (CVE-2011-3192))
# again we return 200 to some strange URL # again we return 200 to some strange URL
90034 IGNORE (Cloud Metadata Potentially Exposed) 90034 IGNORE (Cloud Metadata Potentially Exposed)
40035 IGNORE (Hidden File Found) 40035 IGNORE (Hidden File Found)

Can't render this file because it has a wrong number of fields in line 2.