You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
default value
sets the resulting value if the source value matches none of the specified variants. When default is not specified, the default
resulting value will be an empty string.
It is easy to forget about default value. So malefactor can bypass this "authorization control" with simple https://targethost.com/map-poc/another-private-area. It will be great if gixy can detect such case.
The text was updated successfully, but these errors were encountered:
It looks like common case when
map
is used for some kind of authorization control. Simplified example could look like:According to the manual:
It is easy to forget about
default
value. So malefactor can bypass this "authorization control" with simplehttps://targethost.com/map-poc/another-private-area
. It will be great if gixy can detect such case.The text was updated successfully, but these errors were encountered: