Skip to content

fix: require variance check for detections without debug indicators (v2.0.3)#4

Merged
devploit merged 1 commit intomainfrom
devploit/fix-false-positives
Feb 4, 2026
Merged

fix: require variance check for detections without debug indicators (v2.0.3)#4
devploit merged 1 commit intomainfrom
devploit/fix-false-positives

Conversation

@devploit
Copy link
Owner

@devploit devploit commented Feb 4, 2026

Summary

  • Variance check now triggers for ANY detection without debug indicators
  • Previously only triggered for similarity-based signals
  • Fixes false positives on dynamic pages like login.microsoftonline.com

Test plan

  • Test with Microsoft login page - should NOT report headers as findings

🤖 Generated with Claude Code

…rs (v2.0.3)

Previously, variance check was only triggered for similarity-based signals.
Now it triggers for ANY detection that lacks debug indicators, preventing
false positives on dynamic pages like login.microsoftonline.com.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@devploit devploit merged commit 72aa752 into main Feb 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant