Address daily owasp zap failures - Githubissues

Sgtpluck / resource-search

Other

0 stars 0 forks source link

Address daily owasp zap failures #14

Closed rahearn closed 2 years ago

rahearn commented 2 years ago

Figured out why the SQL injection check was getting triggered, and it's definitely not a vulnerability.

Changes:

IGNORE the SQL injection scans for dbs that aren't in use.
Only permit search params that have corresponding Query classes to properly parse.
Removed standard-ruby since it wasn't being used.