Added negative content type check (#3932)

vulnerabilities/wordpress/sassy-social-share.yaml

@@ -1,11 +1,11 @@
 id: sassy-social-share-xss
 
 info:
-  name: Sassy Social Share XSS
+  name: Sassy Social Share <= 3.3.3 - Cross-Site Scripting
   author: Random_Robbie
   severity: medium
-  description: Sassy Social Share <= 3.3.3 - Cross-Site Scripting (XSS)
-  tags: wordpress,wp-plugin
+  tags: wordpress,wp-plugin,sassy,xss
+
 requests:
   - method: GET
     path:
@@ -14,13 +14,19 @@ requests:
     matchers-condition: and
     matchers:
       - type: word
+        part: body
         words:
           - '[{"<img src=x onerror=alert(document.domain)>":""}]'
           - 'facebook'
           - 'twitter'
-        part: body
         condition: and
 
+      - type: word
+        part: header
+        words:
+          - 'application/json'
+        negative: true
+
       - type: status
         status:
           - 200