Merge pull request #384 from ohlinge/master

Fix bug about CVE-2018-1000129

cves/CVE-2018-1000129.yaml

@@ -2,7 +2,7 @@ id: CVE-2018-1000129
 
 info:
   name: Jolokia XSS
-  author: mavericknerd
+  author: mavericknerd @0h1in9e
   severity: high
   description: An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.
 
@@ -20,4 +20,8 @@ requests:
       - type: word
         words:
           - "<svg onload=alert(document.domain)>"
-        part: body
+        part: body
+      - type: word
+        words:
+          - "text/html"
+        part: header