Details
Alert Id 10027
Alert Type Passive
Status release
Risk Informational
CWE 200
WASC 13
Tags OWASP_2017_A03
OWASP_2021_A01

Summary

The response appears to contain suspicious comments which may help an attacker. Note: Matches made within script blocks or files are against the entire content not only comments.

Solution

Remove all comments that return information that may help an attacker and fix any underlying problems they refer to.

References

Code

org/zaproxy/zap/extension/pscanrules/InformationDisclosureSuspiciousCommentsScanRule.java