Strict matchers

exposed-panels/magento-admin-panel.yaml

@@ -5,8 +5,7 @@ info:
   author: TechbrunchFR
   severity: info
   description: As a security best practice, Magento recommends that you use a unique, custom Admin URL instead of the default admin or a common term such as backend. Although it will not directly protect your site from a determined bad actor, it can reduce exposure to scripts that try to gain unauthorized access.
-  reference:
-    - https://docs.magento.com/user-guide/stores/store-urls-custom-admin.html
+  reference: https://docs.magento.com/user-guide/stores/store-urls-custom-admin.html
   tags: magento
 
 requests:
@@ -14,11 +13,13 @@ requests:
     path:
       - '{{BaseURL}}/admin'
 
-    redirects: true
-    max-redirects: 2
-    cookie-reuse: true
-
+    matchers-condition: and
     matchers:
       - type: status
         status:
-          - 200
+          - 302
+
+      - type: word
+        words:
+          - "/admin/index/index/key/"
+        part: header