Skip to content

Update DAST "Site Profile Validation" links

Ben King requested to merge benjaminking-dast-profile-links into master

What does this MR do and why?

In 15.6, a merge request introduced a change to how we present information on DAST in the documentation. The MR made changes including moving content away from the main 'index' page.

A UI section of the code still references the previous index URL and a specific anchor point, and has not been updated. This MR fixes this by providing the updated path. Other references to the incorrect path have also been corrected in the code.

Example of UI component which still uses the incorrect documentation path: image

Screenshots or screen recordings

Before (taken to DAST index page without an anchor) After (taken to proxy page with anchor)
MR-before MR-after

How to set up and validate locally

  1. Ensure your GDK instance has paid features by using an Ultimate license file
  2. Create or go to an existing project
  3. Navigate to Security and Compliance → On-demand scans
  4. Select New scan
  5. Under Scanner Profile, configure an active scan.
  6. Go to the Site profile section of the page, and create a new site profile with dummy data (e.g. https://example.com).
  7. Confirm the warning component appears about having an unvalidated site for an active scan
  8. Follow the Learn more about site validation link.
  9. This should direct to the correct location in the GitLab documentation, which is this link: https://docs.gitlab.com/ee/user/application_security/dast/proxy-based.html#site-profile-validation

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Ben King

Merge request reports