Update top-xss-params.yaml

Fixes an edge case false positive on AkamaiGhost servers
2021-05-10 18:20:48 +00:00 · 2021-05-10 18:20:48 +00:00 · dea16d4ebd
parent 491789580d
commit dea16d4ebd
1 changed files with 8 additions and 0 deletions
--- a/vulnerabilities/generic/top-xss-params.yaml
+++ b/vulnerabilities/generic/top-xss-params.yaml
@ -42,6 +42,14 @@ requests:
          - "text/html"
        part: header

+      - type: word
+        words:
+          - "<title>Access Denied</title>"
+          - "You don't have permission to access"
+        part: body
+        condition: and
+        negative: true
+
      - type: status
        status:
          - 200