Skip to content

Commit d78df13

Browse files
committed
ascanrules: Reflected XSS introduce param object
To facilitate further modifications and refactoring. - CHANGELOG > Added maintenance note. - CrossSiteScriptingScanRule > Introduce and leverage new param object. - HtmlContextAnalyser > Throw an exception if the target param is empty as that leads to an infinite loop. Signed-off-by: kingthorin <[email protected]>
1 parent cf0d606 commit d78df13

File tree

3 files changed

+255
-195
lines changed

3 files changed

+255
-195
lines changed

addOns/ascanrules/CHANGELOG.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,8 @@ All notable changes to this add-on will be documented in this file.
44
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
55

66
## Unreleased
7-
7+
### Changed
8+
- Maintenance changes.
89

910
## [72] - 2025-06-20
1011
### Added
@@ -15,6 +16,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
1516
- SQL Injection scan rule to start using ComparableResponse - part of the work to reduce False Positives.
1617
- Depends on an updated version of the Common Library add-on.
1718
- Due to it being 2025 and the mass adoption of HTTPS: De-prioritized plain HTTP payloads in the External Redirect scan rule.
19+
- Maintenance changes.
1820

1921
### Fixed
2022
- SQL Injection scan rule to treat a 500 response to an SQLi attack as a likely vulnerability.

0 commit comments

Comments
 (0)