10027β€”Information Disclosure - Suspicious Comments

PUBLISHEDsecurity alertInformational
Passive

Metadata

Alert ID:
10027
Risk:
Informational
Type:
Passive

Summary

The response appears to contain suspicious comments which may help an attacker. Note: Matches made within script blocks or files are against the entire content not only comments.

Solution

Remove all comments that return information that may help an attacker and fix any underlying problems they refer to.

Other info

The following pattern was used: \bFIXME\b and was detected in the element starting with: "<!-- FixMe: cookie: root=true; Secure -->", see evidence field for the suspicious comment/snippet.