stackhawk-jsv-form-cookie.yml

hawk:
  spider:
    maxDurationMinutes: 2
  scan:
    policyName: LOG4SHELL
app:
  applicationId: ${APP_ID:44d63acb-a50b-4ab5-baa3-9508bb12691f}
  openApiConf:
    filePath: openapi.yaml
  env: Development
  host: ${APP_HOST:https://localhost:9000}
  excludePaths:
    - "/logout"
  antiCsrfParam: "_csrf"
  authentication:
    loggedInIndicator: "\\QSign Out\\E"
    loggedOutIndicator: ".*Location:.*/login.*"
    usernamePassword:
      type: FORM
      loginPath: /login
      loginPagePath: /login
      usernameField: username
      passwordField: password
      scanUsername: "user"
      scanPassword: "password"
    cookieAuthorization:
      cookieNames:
        - "JSESSIONID"
    testPath:
      path: /search
      success: ".*200.*"