HTTP method tampering

What it detects

Routes whose authorization or behavior changes unsafely under alternate HTTP methods.

Evidence

The baseline method and the alternate method response.

Remediation

Allow only intended methods and apply identical authorization at every method handler.

Limitations

This check is limited to the applicability and evidence delivered by dast. Review the evidence in context; a match is a finding input, while confidence and policy determine its disposition.

Related reference

Analyzer Registry · Findings and release decisions · Policy and confidence · Active testing

Remediation guidance: Remediation and fix verification · Baselines and suppressions