HCL TECHNOLOGIES ABOUT US PRODUCTS & SOLUTIONS RESOURCES CONTACT US

Home
Reference
Review reference information for the product.
Folder Explorer topics
Learn about folder explorer topics.
Creating scans in the Folder Explorer
Learn how to create scan in the folder explorer.
Optimizing your scan with advanced configuration options
Use this task to configure an advanced scan with complex configuration. Use this method for web applications that require a lot of user interaction to navigate the application or if you would like to just test a specific area of your application.
Finding more content
An XRule is an XML script used to enhance the scanning of your website or application and to search the database for information that has been collected by a scan. When using it to enhance the ability of the job to scan a site, an XRule can find links inside a Flash file, find dynamically-created links inside JavaScript™, or get past a login routine.
Scanning JavaScript™ and Flash for links and content
Specify how the scan job will scan for URLs in JavaScript™ and Flash components or to specify some of the limitations you want to place on the scan. Of the two methods available, the Parse JavaScript method offers better scanning performance than the Execute JavaScript method. However, the Execute JavaScript method benefits from being more accurate and discovering URLs and other content that might otherwise go unnoticed because they are dynamically added to the page.
What happens when JavaScript™ and Flash are parsed
When using the parse method of analysis, the content scan can only find URLs inside JavaScript™ and Flash components.
Default search expressions
When parsing JavaScript™ and Flash, the default search expressions are sufficient to find URLs.

Default search expressions

When parsing JavaScript™ and Flash, the default search expressions are sufficient to find URLs.

Here are the default patterns the scan job uses to identify URLs in JavaScript and Flash movies:

Table 1. Default Search Patterns Used When Parsing
Default Pattern	Description
regexp: .\.(html?\|gif\|jpe?g\|png\|jsp\|cfm\|zip\|exe\|aspx?\|pl\|pdf\|xml\|ra\|asx\|ram\|swf)(\?.)?	The file extensions can occur within the URL or at the end of the URL.
regexp: .\.dll\?.	This pattern matches URLs that contain the string .dll, which can appear within the URL, but not at the end of the URL.
regexp: .\.nsf((\?\|/).)?	This pattern matches URLs that contain the string .nsf, which can appear within the URL or at the end of the URL.
regexp: http:\/\/.+	This pattern matches URLs that begin with "http://".
regexp: mailto:.+	This pattern matches URLs that begin with "mailto".