hdiv/hdiv-spring-mvc-showcase — Issue #1: /attacks/.* is still validated by HDIV
Author: sandermak
Created: 2012-02-02 13:25:16+00:00
State: open

I wanted to try HDIV and ran this sample application (no changes, just tomcat:run). However, all examples in the 'vulnerable section' do not work: the HDIV validations all fire for these pages as well, even though /attacks/.* is in the startpages configuration.