pscanrules: Charset Mismatch add example alerts

[kingthorin]

Overview

• CHANGELOG > Add note.
• CharsetMismatchScanRule > Add example alerts, adjust handling, some minor related clean code changes.
• CharsetMismatchScanRuleUnitTest > Add test to assert the example details, use parameterized case where practical.
• Messages.properties > Clarify one of the descriptions.

Related Issues

• Part of New common getExampleAlerts() method zaproxy#6119
• Part of Update rules to use alert refs zaproxy#7100

[psiinon]

Checkmarx One – Scan Summary & Details – 39a9afb5-3ea9-4e27-99f2-75db151a2d31

Fixed Issues (3)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	Use_Of_Hardcoded_Password	/addOns/authhelper/src/main/java/org/zaproxy/addon/authhelper/AuthUtils.java: 169
	Heap_Inspection	/addOns/authhelper/src/test/java/org/zaproxy/addon/authhelper/AuthUtilsUnitTest.java: 1297
	Heap_Inspection	/addOns/authhelper/src/test/java/org/zaproxy/addon/authhelper/AuthUtilsUnitTest.java: 1318

---

Use @Checkmarx to reach out to us for assistance.

Just send a PR comment with @Checkmarx followed by a natural language request.

Examples: @Checkmarx how are you able to help me? @Checkmarx rescan this PR

[Copilot]

Pull Request Overview

This PR enhances the Charset Mismatch scan rule by adding example alert functionality for documentation generation and improving alert handling. The changes include adding example alerts for all mismatch types, implementing alert references, and removing a previously flagged variant about META content-type missing that affected older clients.

Key changes:

• Added example alert functionality and alert references to the scan rule
• Removed the "META Content-Type Charset Missing" alert variant and related functionality
• Refactored test structure to use parameterized tests and simplified test setup

Reviewed Changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
CharsetMismatchScanRule.java	Added example alerts, alert references, refactored MismatchType enum, and removed deprecated alert variant
CharsetMismatchScanRuleUnitTest.java	Updated tests to verify example alerts, converted to parameterized tests, and removed tests for deprecated functionality
Messages.properties	Removed message keys for deprecated META content-type missing alert variant
pscanrules.html	Removed documentation for deprecated META content-type missing alert
CHANGELOG.md	Added changelog entries documenting the additions and removals

Comments suppressed due to low confidence (1)

addOns/pscanrules/src/main/java/org/zaproxy/zap/extension/pscanrules/CharsetMismatchScanRule.java:56

• The string literal is missing the closing '\n' character. It should be 'Content-Type: text/html;charset=UTF-8\r\n'.

        Map<String, String> alertTags = new HashMap<>();

[kingthorin]

Deconflicted

[thc202]

The commit message has conflict leftovers.

[kingthorin]

Got all those (I think)

[kingthorin]

The Windows CI failure is unrelated

[kingthorin]

Done & done

[thc202]

Thank you!