zydronium/manage.get.gov
1
0
Fork 0
mirror of https://github.com/cisagov/manage.get.gov.git synced 2025-08-12 20:49:41 +02:00
Code Issues Projects Releases Packages Wiki Activity

Add comment to the top correctly this time

Browse source
This commit is contained in:
Rebecca Hsieh 2023-08-15 12:13:29 -07:00
parent 962d70dccc
commit d4de131ecd
No known key found for this signature in database
GPG key ID: 644527A2F375A379
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/zap.conf
View file

@ -30,9 +30,9 @@
# UNCLEAR WHY THIS ONE IS FAILING. Giving 404 error. # UNCLEAR WHY THIS ONE IS FAILING. Giving 404 error.
10027 OUTOFSCOPE http://app:8080/public/js/uswds-init.min.js 10027 OUTOFSCOPE http://app:8080/public/js/uswds-init.min.js
# get-gov.js contains suspicious word "from" as in `Array.from()` # get-gov.js contains suspicious word "from" as in `Array.from()`
10027 OUTOFSCOPE http://app:8080/todo
# Ignore wording of "TODO"
10027 OUTOFSCOPE http://app:8080/public/js/get-gov.js 10027 OUTOFSCOPE http://app:8080/public/js/get-gov.js
# Ignore wording of "TODO"
10027 OUTOFSCOPE http://app:8080/todo
10028 FAIL (Open Redirect - Passive/beta) 10028 FAIL (Open Redirect - Passive/beta)
10029 FAIL (Cookie Poisoning - Passive/beta) 10029 FAIL (Cookie Poisoning - Passive/beta)
10030 FAIL (User Controllable Charset - Passive/beta) 10030 FAIL (User Controllable Charset - Passive/beta)