misc update

vulnerabilities/generic/top-xss-params.yaml

@@ -21,6 +21,8 @@ requests:
     matchers-condition: and
     matchers:
       - type: word
+        part: body
+        condition: or
         words:
           - "'>\"<svg/onload=confirm('q')>"
           - "'>\"<svg/onload=confirm('s')>"
@@ -60,21 +62,19 @@ requests:
           - "'>\"<svg/onload=confirm('lang')>"
           - "'>\"<svg/onload=confirm('list_type')>"
           - "'>\"<svg/onload=confirm('year')>"
-        part: body
-        condition: or
 
       - type: word
+        part: header
         words:
           - "text/html"
-        part: header
 
       - type: word
+        part: body
+        condition: or
+        negative: true
         words:
           - "<title>Access Denied</title>"
           - "You don't have permission to access"
-        part: body
-        condition: and
-        negative: true
 
       - type: status
         status: