Add more strict rules for security.txt

Previous one had a few false positives. This should narrow that down.
patch-1
bad5ect0r 2020-05-08 21:41:26 +10:00 committed by GitHub
parent 4565f42799
commit 572105b16a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 0 deletions

View File

@ -10,6 +10,14 @@ requests:
path:
- "{{BaseURL}}/.well-known/security.txt"
matchers:
- type: status
status:
- 200
- type: word
words:
- "Contact:"
condition: and
- type: dsl
dsl:
- "len(body) <= 1024 && len(body) > 0"
condition: and