TigahandGitHub fa3223ab31 fix(frameworks): drop the dead X-Powered-By signature from ASP.NET (#159) ...

the asp.net detector carried {Pattern: "X-Powered-By: ASP.NET", HeaderOnly:
true}, but containsHeader matches a signature against each header name and each
value separately, never against a joined "name: value" string. so that pattern
could never match anything. it only added its 0.4 to the detector's total
weight, diluting every real signal: a genuine response (an X-AspNetMvc-Version
header, an X-Powered-By: ASP.NET header, an .aspx link) scored 1.1/3.8 = 0.47,
just under the 0.5 threshold, and went undetected.

the live "ASP.NET" header signature already matches the X-Powered-By value, so
removing the dead one loses no coverage and lifts that same response to
1.1/3.4 = 0.56. adds a regression test for it.

2026-06-22 17:30:15 -07:00

..

detectors

fix(frameworks): drop the dead X-Powered-By signature from ASP.NET (#159)

2026-06-22 17:30:15 -07:00

cve_internal_test.go

fix(scan): dnslist dedup, robots recursion bound, framework version lookup, takeover cname

2026-06-10 14:47:17 -07:00

cve.go

chore: bump copyright headers to 2026

2026-06-08 18:30:48 -07:00

detect_test.go

fix(frameworks): drop the dead X-Powered-By signature from ASP.NET (#159)

2026-06-22 17:30:15 -07:00

detect.go

fix(scan): dnslist dedup, robots recursion bound, framework version lookup, takeover cname

2026-06-10 14:47:17 -07:00

detector.go

chore: bump copyright headers to 2026

2026-06-08 18:30:48 -07:00

fuzz_test.go

chore: bump copyright headers to 2026

2026-06-08 18:30:48 -07:00

result.go

chore: bump copyright headers to 2026

2026-06-08 18:30:48 -07:00

version.go

feat(frameworks): add htmx detector (#188)

2026-06-22 17:28:24 -07:00