When there is a need to scan a static site which you already know it doesn't
talk to a DB, the SQL injection step should not occur during active scan.
This could save time.
What steps will reproduce the problem?
1. Start an Active scan and uncheck 'Db'.
2. Start the scan and notice that 'SQL injection' is processed.
What is the expected output? What do you see instead?
'SQL injection' should be excluded or automatically skipped.
What version of the product are you using? On what operating system?
2.4.0 / Win7, 64-bit
Please provide any additional information below.
See attached screenshot.
Original issue reported on code.google.com by ath...@gmail.com on 8 May 2015 at 8:50
Original issue reported on code.google.com by
ath...@gmail.com
on 8 May 2015 at 8:50Attachments: