Highlighting
Update&Cleanup of Hugo's cookie module
Optimization of the cookie module
Added response highlighting for Java XSS detections.
Added affected parameter and methods to alerts.
Update year.

Signed-off-by: dma <dma@subgraph.com>
Still builds for me. Hope this doesn't break anything.

Signed-off-by: dma <dma@subgraph.com>
Session cookie alert.

Signed-off-by: dma <dma@subgraph.com>
File upload detection module. Stored XSS XML.

TBD.

Signed-off-by: dma <dma@subgraph.com>
Added support for case insensitive regex highlighting.

Will fix the module API so there is only one addRegexHighlight method with a boolean.

Signed-off-by: dma <dma@subgraph.com>
Updated the jQuery file upload module to use the case insensitive API highlighing.

Signed-off-by: dma <dma@subgraph.com>
This is a bug fix.

The bug can result in a '%' being appended to the end of a URI if the last sequence is %20.

0x20 is a printable character.

Signed-off-by: dma <dma@subgraph.com>
XSS and URL injection detection improvements. Checks for javascript: cases, better script injection detection.

JS needs to be cleaned up a bit.

Signed-off-by: dma <dma@subgraph.com>
Hack I had to put in because of bug #547, which has to do with saved responses being inaccessible to modules.

Signed-off-by: dma <dma@subgraph.com>
Vega currently grabs the scan ID by parsing it out of a certain offset in the XSS tag. An API accessible accessor might be useful.

Signed-off-by: dma <dma@subgraph.com>
Added a detection type field to the alert template.

Signed-off-by: dma <dma@subgraph.com>
Improved blind SQL injection detection, including two new modules. This is a work in progress.

Signed-off-by: dma <dma@subgraph.com>
Response processing module and alert: HTTP authentication over HTTP.

Signed-off-by: dma <dma@subgraph.com>
Bug fix:

A malformed URI in a page such as http://got_cha/ or http://thistoo:-1 can cause an exception.

This will result in a scan failing. Proxy doesn't fail, but exception still lights up the console.

Signed-off-by: dma <dma@subgraph.com>
Added JSoup License.

Signed-off-by: dma <dma@subgraph.com>