lib/contrast/agent/assess/policy/trigger_validation/xss_validator.rb in contrast-agent-6.7.0 vs lib/contrast/agent/assess/policy/trigger_validation/xss_validator.rb in contrast-agent-6.8.0
- old
+ new
@@ -6,10 +6,10 @@
module Assess
module Policy
module TriggerValidation
# Validator used to assert a Reflected XSS finding is actually
# vulnerable before serializing that finding as a DTM to report to
- # the service.
+ # the TeamServer.
module XSSValidator
RULE_NAME = 'reflected-xss'
SAFE_CONTENT_TYPES = %w[/csv /javascript /json /pdf /x-javascript /x-json].cs__freeze
# A finding is valid for XSS if the response type is not one of