From e37285242e591980239410b6b8c58cd5e6e2d08b Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Tue, 4 Jul 2023 09:28:08 +0530 Subject: [PATCH] Update and rename exposures/files/yarn-lock.yaml to http/exposures/files/yarn-lock.yaml --- {exposures => http/exposures}/files/yarn-lock.yaml | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) rename {exposures => http/exposures}/files/yarn-lock.yaml (72%) diff --git a/exposures/files/yarn-lock.yaml b/http/exposures/files/yarn-lock.yaml similarity index 72% rename from exposures/files/yarn-lock.yaml rename to http/exposures/files/yarn-lock.yaml index 0cdab5e5a0..06671b0076 100644 --- a/exposures/files/yarn-lock.yaml +++ b/http/exposures/files/yarn-lock.yaml @@ -1,13 +1,14 @@ id: yarn-lock info: - name: yarn lock file disclosure + name: Yarn Lock File Disclosure author: oppsec,noraj severity: info - description: The yarn.lock file stores the versions of each Yarn dependency installed. It's a lock file for package.json. + description: | + The yarn.lock file stores the versions of each Yarn dependency installed. It's a lock file for package.json. reference: - https://classic.yarnpkg.com/lang/en/docs/yarn-lock/ - tags: exposure,files + tags: exposure,files,yarn requests: - method: GET @@ -17,15 +18,16 @@ requests: matchers-condition: and matchers: - type: word + part: body words: - "# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY." - "# yarn lockfile v1" condition: and - type: word + part: header words: - "text/html" - part: header - type: status status: