ascanrulesBeta: Insecure HTTP Method rule - Address potential FP

[kingthorin]

Overview

• Remove unnecessary try/catch when raising alert.
• Move always used variable assignment to be a constant.
• Ensure Evidence values are literal and not assembled.
• Adjust Confidence when findings are based on 40x authn/authz type responses.
• Corrected regex quantifier on third party content matching.
• May now raise more alerts because the HTTP method/verb comparison previously may have been values with leading or trailing space which would not have matched.

[psiinon]

Checkmarx One – Scan Summary & Details – 6862df0c-dc94-4423-97ea-eb3c3caaec65

Great job! No new security vulnerabilities introduced in this pull request

---

Use @Checkmarx to reach out to us for assistance.

Just send a PR comment with @Checkmarx followed by a natural language request.

Examples: @Checkmarx how are you able to help me? @Checkmarx rescan this PR