Merge pull request #200 from caido-community/1.0.4

Author: bebiksior

caido.config.ts

@@ -11,7 +11,7 @@ export default defineConfig({
   id,
   name: "Scanner",
   description: "Passive and active vulnerability scanner",
-  version: "1.0.3",
+  version: "1.0.4",
   author: {
     name: "Caido Labs Inc.",
     email: "dev@caido.io",

packages/backend/src/checks/index.ts

@@ -2,8 +2,6 @@ import antiClickjackingScan from "./anti-clickjacking";
 import applicationErrorsScan from "./application-errors";
 import bigRedirectsScan from "./big-redirects";
 import commandInjectionScan from "./command-injection";
-import cookieHttpOnlyScan from "./cookie-httponly";
-import cookieSecureScan from "./cookie-secure";
 import corsMisconfigScan from "./cors-misconfig";
 import creditCardDisclosureScan from "./credit-card-disclosure";
 import cspAllowlistedScriptsScan from "./csp-allowlisted-scripts";
@@ -41,8 +39,8 @@ export const Checks = {
   APPLICATION_ERRORS: "application-errors",
   BIG_REDIRECTS: "big-redirects",
   COMMAND_INJECTION: "command-injection",
-  COOKIE_HTTPONLY: "cookie-httponly",
-  COOKIE_SECURE: "cookie-secure",
+  // COOKIE_HTTPONLY: "cookie-httponly",
+  // COOKIE_SECURE: "cookie-secure",
   CORS_MISCONFIG: "cors-misconfig",
   CREDIT_CARD_DISCLOSURE: "credit-card-disclosure",
   CSP_ALLOWLISTED_SCRIPTS: "csp-allowlisted-scripts",
@@ -81,8 +79,8 @@ export const checks = [
   applicationErrorsScan,
   bigRedirectsScan,
   commandInjectionScan,
-  cookieHttpOnlyScan,
-  cookieSecureScan,
+  // cookieHttpOnlyScan,
+  // cookieSecureScan,
   corsMisconfigScan,
   creditCardDisclosureScan,
   cspAllowlistedScriptsScan,

packages/backend/src/stores/config.ts

@@ -108,14 +108,14 @@ export class ConfigStore {
               checkID: Checks.ANTI_CLICKJACKING,
               enabled: false,
             },
-            {
-              checkID: Checks.COOKIE_HTTPONLY,
-              enabled: true,
-            },
-            {
-              checkID: Checks.COOKIE_SECURE,
-              enabled: true,
-            },
+            // {
+            //   checkID: Checks.COOKIE_HTTPONLY,
+            //   enabled: true,
+            // },
+            // {
+            //   checkID: Checks.COOKIE_SECURE,
+            //   enabled: true,
+            // },
             {
               checkID: Checks.SQL_STATEMENT_IN_PARAMS,
               enabled: false,
@@ -291,14 +291,14 @@ export class ConfigStore {
               checkID: Checks.ANTI_CLICKJACKING,
               enabled: true,
             },
-            {
-              checkID: Checks.COOKIE_HTTPONLY,
-              enabled: true,
-            },
-            {
-              checkID: Checks.COOKIE_SECURE,
-              enabled: true,
-            },
+            // {
+            //   checkID: Checks.COOKIE_HTTPONLY,
+            //   enabled: true,
+            // },
+            // {
+            //   checkID: Checks.COOKIE_SECURE,
+            //   enabled: true,
+            // },
             {
               checkID: Checks.SQL_STATEMENT_IN_PARAMS,
               enabled: true,