lib/contrast/agent/assess/policy/trigger_validation/xss_validator.rb in contrast-agent-6.7.0 vs lib/contrast/agent/assess/policy/trigger_validation/xss_validator.rb in contrast-agent-6.8.0

- old
+ new

@@ -6,10 +6,10 @@ module Assess module Policy module TriggerValidation # Validator used to assert a Reflected XSS finding is actually # vulnerable before serializing that finding as a DTM to report to - # the service. + # the TeamServer. module XSSValidator RULE_NAME = 'reflected-xss' SAFE_CONTENT_TYPES = %w[/csv /javascript /json /pdf /x-javascript /x-json].cs__freeze # A finding is valid for XSS if the response type is not one of