Add password returned in URL check (#141)#222

Open

jthack wants to merge 1 commit into

mainfrom

issue-141-password-returned-in-url

jthack commented Oct 23, 2025

Contributor

Summary

scan response bodies and Location headers for URLs carrying password-like query parameters
raise a high-severity finding listing affected parameter names and lengths
register the passive rule and enable it for the Balanced preset

Testing

pnpm lint
pnpm typecheck
pnpm test -- --match 'Password returned in URL'

Closes #141


          feat: detect password returned in url (#141)

d3557eb

jthack requested a review from a team as a code owner

October 23, 2025 17:11

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet