Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

v1.4.5版本detect_xss_in_cookie: false选项未起作用 #942

Closed
1in9e opened this issue Nov 23, 2020 · 1 comment
Closed

v1.4.5版本detect_xss_in_cookie: false选项未起作用 #942

1in9e opened this issue Nov 23, 2020 · 1 comment

Comments

@1in9e
Copy link
Contributor

1in9e commented Nov 23, 2020

设置如:

  xss:
    enabled: true
    detect_xss_in_cookie: false          # 是否探测入口点在 cookie 中的 xss
    ie_feature: false                   # 是否扫描仅能在 ie 下利用的 xss

然而仍然会去扫描cookie中的xss

@zema1
Copy link
Collaborator

zema1 commented Nov 24, 2020

1.5.0 已修复

@zema1 zema1 closed this as completed Nov 24, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants