Update and rename sri-missing.yaml to missing-sri.yaml

patch-1
Prince Chaddha 2023-09-04 16:54:46 +05:30 committed by GitHub
parent 73225ff8a3
commit 34663f85ee
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 4 deletions

View File

@ -1,15 +1,15 @@
id: sri-missing
id: missing-sri
info:
name: SRI missing
name: Missing Subresource Integrity
author: lucky0x0d,PulseSecurity.co.nz
severity: info
tags: javascript,subresource integrity
description: |
Checks if script tags within the HTML response have Subresource Integrity implemented via the integrity attribute
reference:
- https://cheatsheetseries.owasp.org/cheatsheets/Third_Party_Javascript_Management_Cheat_Sheet.html#subresource-integrity
metadata:
max-request: 1
tags: compliance,js,sri
http:
- raw:
@ -19,7 +19,6 @@ http:
redirects: true
max-redirects: 5
stop-at-first-match: false
matchers-condition: and
matchers:
- type: xpath