owaspNoCredentialsInUrl
owaspCheckErrorResponse will check that no credentials are used in the URL.
Example ruleset configuration
my-security-rule:
description: Checks for credentials being passed in the URL
type: validation
given: $
then:
function: owaspNoCredentialsInUrl
Used by the following rules: