Update general-tokens.yaml
proposed fix for false positives related to the presence of `keyup`, `keydown`, and `keypress` in the response body.patch-1
parent
d1792193d5
commit
9057a617e4
|
@ -2,7 +2,7 @@ id: generic-tokens
|
|||
|
||||
info:
|
||||
name: Generic Tokens
|
||||
author: nadino
|
||||
author: nadino & geeknik
|
||||
severity: info
|
||||
tags: token
|
||||
|
||||
|
@ -12,6 +12,11 @@ requests:
|
|||
- '{{BaseURL}}'
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: regex
|
||||
part: body
|
||||
regex:
|
||||
- (K|k)ey(up|down|press)
|
||||
negativee: true
|
||||
- type: dsl
|
||||
dsl:
|
||||
- regex("TOKEN[\\-|_|A-Z0-9]*(\'|\")?(:|=)(\'|\")?[\\-|_|A-Z0-9]{10}",replace(toupper(body),"",""))
|
||||
|
|
Loading…
Reference in New Issue