Skip to content

Code Contributions

In late 2023, I started focusing on code contributions with an eye towards the analyzers in gitlab-org/security-products/analyzers.

Local Testing and Development

Analyzer Common README

git clone
podman login

DAST Authentication Report

When inspecting a particular gl-dast-debug-auth-report.html generated during a dast job, I noticed that the DOM appeared all on one line. The example in the docs has the DOM displayed...differently, not all on one line.

  • Why does the DOM sometimes appear all on one line?
    • Is this because of a user-controlled setting?
    • Can I get it to appear all on one line on purpose?
    • Can we account for this and improve the auth report? Should we?
  • How are we retrieving and storing the DOM?

Headers for sites with nice DOMs

` HTTP/1.1 404 Not Found CF-Cache-Status: DYNAMIC CF-Ray: 84eca788cc6c0812-IAD Connection: keep-alive Content-Encoding: gzip Content-Length: 690 Content-Type: text/html; charset=utf-8 Date: Thu, 01 Feb 2024 19:38:23 GMT Server: cloudflare Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 rndr-id: c588fc63-271e-4d84 x-render-origin-server: gunicorn