Description

This detector identifies URLs that contain sensitive information in query parameters, path segments, or fragments. When sensitive data like passwords, tokens, or personal information is exposed in URLs, it can be logged in web server logs, browser history, referrer headers, and shared inadvertently through copy-paste operations, creating significant privacy and security risks.

Detection Strategy

• The detector analyzes both the original URL and any processed/normalized URL versions

• It parses each URL to examine query parameters, path segments, and URL fragments

• A vulnerability is reported when any part of the URL contains predefined sensitive field patterns (such as password, token, SSN, credit card numbers, API keys, or other confidential data identifiers)

• The detection triggers immediately upon finding any sensitive information pattern in the URL structure, regardless of the actual values