Skip to content

Configuration: Vue.Js Development Build

Identifier: vue_development_build

Scanner Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner Automated Pentest

Description

Vue.js development builds expose debugging information and development-specific features that shouldn't be present in production environments, potentially revealing internal application structure and aiding attackers in understanding and exploiting the application.

How we test: We analyze JavaScript bundles and application responses to detect if Vue.js development builds are deployed in production. We check for development-specific features, debugging tools, and source maps that indicate a development build is being used instead of a production build.

References:

Configuration

Example

Example configuration:

---
security_tests:
  vue_development_build:
    skip: false

Reference

skip

Type: boolean

Skip the test if true.