For a lot of my security tests the requests are being rejected by the API, but because the XSS string is contained in an error message it counts as a failed test in the response comparison
Is there a simple way of preventing a failed test if the word "Error" is present in the response?
AlumniI would suggest modifying the assertions in your scans.
Hi Amber, thanks for the reply.
I've looked in there, The assertion is "Cross Site Scripting Detection", but the only modifiable field in there is to make a separate call to a different URL for results, nothing that I can see would change the logic of the assertion itself, am I missing something I can do?
AlumniYou can add additional assertions from the Assertions menu.
