Validation

In this step you define the conditions that indicate the test succeeded.

  • Click Add to add another Single or Group filter.
  • When adding more than one item, you must specify the logical relation between them: All, Any or None.
  • In most cases the validation is applied to the response to the test request, and this is the default behavior. However in the case of certain vulnerabilities, for example Stored Cross-Site Scripting, the validation must be done on the response to a different request. In that case select the second radio button (Run this validation on the response to the following request), and then define the request.
    Tip: For more control over the URL definition, for example if you need to overwrite the body, or specify GET or POST, click Edit Request.

When done, click Next to move to the next step.

Example

For an example, see the Filter step.