Merge pull request #740 from afaq1337/master

Added package-lock.json template
2021-01-08 00:28:00 +05:30 · 2021-01-08 00:28:00 +05:30 · d0f3b8a7e7
parent 87ec61f0de eb66806f5c
commit d0f3b8a7e7
1 changed files with 2 additions and 1 deletions
--- a/files/package-json.yaml
+++ b/files/package-json.yaml
@ -2,7 +2,7 @@ id: package-json

 info:
  name: npm package.json disclosure
-  author: geeknik
+  author: geeknik & afaq
  severity: info
  description: All npm packages contain a file, usually in the project root, called package.json - this file holds various metadata relevant to the project.

@ -10,6 +10,7 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}/package.json"
+      - "{{BaseURL}}/package-lock.json"

    matchers-condition: and
    matchers: