Details
Alert Id 10104
Alert Type Active
Status release
Risk Informational
CWE
WASC
Technologies Targeted All
Tags CUSTOM_PAYLOADS

Summary

Check for differences in response based on fuzzed User Agent (eg. mobile sites, access as a Search Engine Crawler). Compares the response statuscode and the hashcode of the response body with the original response.

Solution

References

Code

org/zaproxy/zap/extension/ascanrules/UserAgentScanRule.java