id: dnt-policy-detect

info:
  name: DNT Policy Declaration
  author: rxerium
  severity: info
  description: |
    Detects a Do not Track policy.
  reference:
    - https://www.freeprivacypolicy.com/blog/privacy-policy-do-not-track-dnt/
  tags: privacy,dnt,detect,compliance,policy,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/.well-known/dnt-policy.txt"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Do not track"
          - "Policy"
          - "Compliance"
        condition: and

      - type: status
        status:
          - 200
# digest: 4a0a0047304502202213a043b54b84a250f90134e400d63c7873da89e7f5e6f5353140fab522f992022100dc28d6b4b00c38ec5f2d3904b3599cda62750a7f67e58d1bb1b261bf51df03d7:922c64590222798bb761d5b6d8e72950