REG: Application error disclosure

[Dharini n]

Hai everyone,

In my application am getting application error disclosure security issue using owasp zap tool.

I have implemented the custom errors in my application based on references. but still am getting this error in default dll and script files.

Owasp Zap tool identify the any error related words like (Internal error, ‘this._Items[…].0’ is null or not an object) from .js script and default dll files.

Any solution for this please suggest me.

[psiinon]

Are these errors from a ZAP rule or one of your own?

Either way, as per your other post - we need details.

We're not telepathic :)

Cheers,

Simon

[Dharini n]

Getting error from Zap tool

I have attached the image for your references.

[psiinon]

OK, this is also a false positive, and in this case I think we could improve ZAP.

I think we should only raise alerts like this on JS / CSS pages at a low threshold.

I've raised this bug: https://github.com/zaproxy/zaproxy/issues/7724

Cheers,

Simon