Skip to content

Use DAST_API_EXCLUDE_URLS with DAST API on-demand scans

Michael Eddington requested to merge 363422-fix-variable-prefix into master

What does this MR do and why?

Updating the DAST on-demand code to use the correct variable DAST_API_EXCLUDE_URLS when performing an api scan. Recent changes to the DAST on-demand scan to support using API Security for DAST API scans did not use the correct variable prefix for EXCLUDE_URLS, always using DAST_ instead of DAST_API_.

  • Changes affect feature still behind feature flag that is not yet enabled.
  • No documentation changes needed.
  • Related to #363422 (closed)

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Michael Eddington

Merge request reports