CWE-79 Persistent XSS for DAST API
Problem
API Security (Peach API) scanner doesn't support CWE-79 Persistent XSS. This is a gap between API Security and ZAP.
Proposal
-
Create new check -
Unit tests -
Integration tests -
E2E Tests -
Java benchmark passes