sec-hidden-markup-ext

Text hidden in picture, alt, title, off-screen or collapsed markup.

warning Hidden content and security Not active yet

All rules73

Not active in this release

The id sec-hidden-markup-ext is reserved in the rule registry for a later release. No code emits it in version 0.3.0, so it never appears in a finding, in SARIF or in the config hints, and naming it in .asitisrc.json gives an "unknown rule id" error until it ships.

What it will catch: Text hidden in picture, alt, title, off-screen or collapsed markup.

The rules index lists what runs today. Progress on new rules is in the repository.