Rick M

Update for newer GitHub token format?

1

If https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json really is the base rule set for TruffleHog as stated on: https://github.com/trufflesecurity/truffleHog#customizing, then it should have a new entry that accommodates updated GitHub tokens. Per https://github.blog/changelog/2021-03-31-authentication-token-format-updates-are-generally-available/ It seems...

Actual pattern validation?

4

**Is your feature request related to a problem? Please describe.** As part of the CI workflow for PRs (etc) would it be possible to validate the regex patterns or [dom...

replacer: Add cache prevention rules

1

## Overview - CHANGELOG > Added change note - ReplacerParam > Added new default rules (disabled by default). - ReplacerParamUnitTest > Tweaked to accommodate these additional changes. ## Related Issues...

After 2.10.0 or whatever the next release is. As discussed: https://github.com/zaproxy/zap-api-docs/pull/36/files#r422719979 > This request is initiated as a client side AJAX request using a spec called JWT. Currently ZAP doesn't...

Add support for Java Vuln? (CVE-2022-21449)

2

**Is your feature request related to a problem? Please describe.** It would be great if the JWT add-on could check for JWT issues related to [CVE-2022-21449](https://neilmadden.blog/2022/04/19/psychic-signatures-in-java/). **Describe the solution you'd...

## Overview - Add static modifier where applicable - Remove boiler plate or useless comments/JavaDoc attributes. - CHANGELOG > Add maintenance note (if there wasn't already one present). - pscanrules...

Broken links

4

I haven't been doing a good job or keeping an eye on the link check job. The following have been reported as [broken by the job](https://github.com/zaproxy/zaproxy-website/actions/workflows/check-links.yml), and manually confirmed by...

General - Fix Title Caps

22

Per https://groups.google.com/forum/#!topic/zaproxy-develop/FPwvyHY5rb4 Refs: - https://www.zaproxy.org/docs/developer/dev-rules-and-guidelines/#style-guidelines - https://capitalizemytitle.com/#Chicago **How-to** - Run ZAP (from a feature branch made from an up-to-date develop branch). - Look around the UI for something that isn't...

tech detection: SAST Fixes (SonarLint)

1

## Overview - AppPattern > Remove unnecessary right side type declaration. - CHANGELOG > Add maint note. - ExtensionWappalyzer > Remove unused/unnecessary variables. - PopupMenuEvidence > Use .equals() for String...

graphql: Add more fingerprints

1

## Overview - Fingerprinting checks for the following engines: - pg_graphql - tailcall - Hot Chocolate ## Related Issues N/A ## Checklist - [na] Update help - [x] Update changelog...