Fewer false positives in generic-env.yaml

2023-08-09 10:42:01 +02:00 · 2023-08-09 10:42:01 +02:00 · 8da78234c0
parent 760d8d4aa0
commit 8da78234c0
1 changed files with 7 additions and 0 deletions
--- a/http/vulnerabilities/generic/generic-env.yaml
+++ b/http/vulnerabilities/generic/generic-env.yaml
@ -40,8 +40,15 @@ http:
      - "{{BaseURL}}/.env.{{SD}}"
      - "{{BaseURL}}/api/.env"

+    matchers-condition: and
    matchers:
      - type: regex
        part: body
        regex:
          - "(?mi)^[a-z_]*(KEY|TOKEN|PASS|SECRET|DB_URL|DATABASE_URL|MAILER_URL)[a-z_]*="
+
+      - type: word
+        part: body
+        negative: true
+        words:
+          - "<html"