added flow & updated matcher

http/misconfiguration/apache/apache-server-status-localhost.yaml

@@ -1,25 +1,35 @@
----
 id: apache-server-status-localhost
+
 info:
   name: Server Status Disclosure
   author: pdteam,geeknik,NaN-kl
   severity: low
-  description: Apache Server Status page is exposed, which may contain information
-    about pages visited by the users, their IPs or sensitive information such as
-    session tokens.
+  description: |
+    Apache Server Status page is exposed, which may contain information about pages visited by the users, their IPs or sensitive information such as session tokens.
   metadata:
     max-request: 2
   tags: apache,debug,misconfig
+
+flow: http(1) && http(2)
+
 http:
   - method: GET
     path:
       - "{{BaseURL}}/server-status"
+
     matchers:
       - type: status
         status:
           - 403
           - 404
+          - 401
+        condition: or
+        internal: true
+
   - method: GET
+    path:
+      - "{{BaseURL}}/server-status"
+
     headers:
       Forwarded: 127.0.0.1
       X-Client-IP: 127.0.0.1
@@ -32,11 +42,10 @@ http:
       X-Remote-Addr: 127.0.0.1
       X-Remote-IP: 127.0.0.1
       X-True-IP: 127.0.0.1
-    path:
-      - "{{BaseURL}}/server-status"
+
     matchers:
       - type: word
         words:
-          - Apache Server Status
-          - Server Version
-        condition: and
+          - "Apache Server Status"
+          - "Server Version"
+        condition: and