You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Notice the -e /*\.js$/i bit -- I'm trying to eliminate the following false-positives which (I'm fairly certain) are the result of my JavaScript files being obfuscated:
[INFO] Running a quick scan for https://xx.yyy.io
[INFO] Issues found: 3
+----------------------------------------+--------+----------+--------------------------------------------------------------+
| Alert | Risk | CWE ID | URL |
+========================================+========+==========+==============================================================+
| Hash Disclosure - Mac OSX salted SHA-1 | High | 200 | https://xx.yyy.io/static/dll/76c7a32f60c9b2ab5d0f.js |
+----------------------------------------+--------+----------+--------------------------------------------------------------+
| Hash Disclosure - Mac OSX salted SHA-1 | High | 200 | https://xx.yyy.io/static/dll/76c7a32f60c9b2ab5d0f.js |
+----------------------------------------+--------+----------+--------------------------------------------------------------+
| Anti CSRF Tokens Scanner | High | 352 | https://xx.yyy.io/static/dll/353fb1927e899732c1fc.js |
+----------------------------------------+--------+----------+--------------------------------------------------------------+
I'd actually prefer to simply ignore the CWE IDs directly (rather than exclude files)... but I don't think there are any flags which enable me to do that.
Am I using the -e flag incorrectly? It's clearly not excluding my JS files. Or is there another way I can configure this scan to ignore those two CWE IDs?
The text was updated successfully, but these errors were encountered:
I have a bash script in which I run the following:
Notice the
-e /*\.js$/i
bit -- I'm trying to eliminate the following false-positives which (I'm fairly certain) are the result of my JavaScript files being obfuscated:I'd actually prefer to simply ignore the
CWE ID
s directly (rather than exclude files)... but I don't think there are any flags which enable me to do that.Am I using the
-e
flag incorrectly? It's clearly not excluding my JS files. Or is there another way I can configure this scan to ignore those two CWE IDs?The text was updated successfully, but these errors were encountered: