You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Burp parser aggregates all findings per type alone.
This means all Cross-site scripting (reflected) (for instance) fall under the same finding, regardless of endpoints, parameters or even severity.
I might be missing context on other people triage approach, but I find this confusing for mine as I'm unable to triage specific issues but rather an entire class of them.
Am I missing something?
Would a PR to change this be acceptable or too big of impact? Does it make sense to create a separate parser for this, if the latter? Or maybe make this dedupe_key configurable in settings.py?
The text was updated successfully, but these errors were encountered:
django-DefectDojo/dojo/tools/burp/parser.py
Line 42 in ca6628d
django-DefectDojo/dojo/tools/burp/parser.py
Line 142 in ca6628d
Burp parser aggregates all findings per
type
alone.This means all
Cross-site scripting (reflected)
(for instance) fall under the same finding, regardless of endpoints, parameters or even severity.I might be missing context on other people triage approach, but I find this confusing for mine as I'm unable to triage specific issues but rather an entire class of them.
Am I missing something?
Would a PR to change this be acceptable or too big of impact? Does it make sense to create a separate parser for this, if the latter? Or maybe make this dedupe_key configurable in settings.py?
The text was updated successfully, but these errors were encountered: