Update link_hidden_dir.yml

sublime-security · Dec 27, 2024 · 483588a · 483588a
1 parent f6ef607
commit 483588a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/detection-rules/link_hidden_dir.yml b/detection-rules/link_hidden_dir.yml
@@ -8,7 +8,8 @@ source: |
   and any(body.links,
           (
             strings.icontains(.href_url.path, "/.well-known/")
-            and not strings.icontains(.href_url.path, '/.well-known/security.txt')
+            and not strings.ends_with(.href_url.path, '/.well-known/security.txt')
+            and not strings.ends_with(.href_url.path, '/.well-known/jwks.json')
           )
           or strings.icontains(.href_url.path, "/.js/")
           or strings.icontains(.href_url.path, "/.env/")