alertRef 10054 seems to miss to fill evidence when SAMESITE set to None

Describe the bug

Response sets cookies like this:

I get results in JSON:

					"pluginid": "10054",
					"alertRef": "10054",
					"alert": "Cookie with SameSite Attribute None",
					"name": "Cookie with SameSite Attribute None",
					"riskcode": "1",
					"confidence": "2",
					"riskdesc": "Low (Medium)",
					"desc": "<p>A cookie has been set with its SameSite attribute set to \"none\", which means that the cookie can be sent as a result of a 'cross-site' request. The SameSite attribute is an effective counter measure to cross-site request forgery, cross-site script inclusion, and timing attacks.</p>",
					"instances":[ 
						{
							"uri": "https://app.shoobx.com/",
							"method": "GET",
							"param": "",
							"attack": "",
							"evidence": ""
						},
						{
							"uri": "https://app.shoobx.com/robots.txt",
							"method": "GET",
							"param": "",
							"attack": "",
							"evidence": ""
						}
					],
					"count": "2",
					"solution": "<p>Ensure that the SameSite attribute is set to either 'lax' or ideally 'strict' for all cookies.</p>",
					"otherinfo": "",
					"reference": "<p>https://tools.ietf.org/html/draft-ietf-httpbis-cookie-same-site</p>",
					"cweid": "1275",
					"wascid": "13",
					"sourceid": "1"
				},
				{
					"pluginid": "10054",
					"alertRef": "10054",
					"alert": "Cookie without SameSite Attribute",
					"name": "Cookie without SameSite Attribute",
					"riskcode": "1",
					"confidence": "2",
					"riskdesc": "Low (Medium)",
					"desc": "<p>A cookie has been set without the SameSite attribute, which means that the cookie can be sent as a result of a 'cross-site' request. The SameSite attribute is an effective counter measure to cross-site request forgery, cross-site script inclusion, and timing attacks.</p>",
					"instances":[ 
						{
							"uri": "https://app.shoobx.com/",
							"method": "GET",
							"param": "AWSELB",
							"attack": "",
							"evidence": "Set-Cookie: AWSELB"
						},
						{
							"uri": "https://app.shoobx.com/robots.txt",
							"method": "GET",
							"param": "AWSELB",
							"attack": "",
							"evidence": "Set-Cookie: AWSELB"
						}
					],
					"count": "2",
					"solution": "<p>Ensure that the SameSite attribute is set to either 'lax' or ideally 'strict' for all cookies.</p>",
					"otherinfo": "",
					"reference": "<p>https://tools.ietf.org/html/draft-ietf-httpbis-cookie-same-site</p>",
					"cweid": "1275",
					"wascid": "13",
					"sourceid": "1"
				},

evidence gets filled when SAMESITE is unset, but not when SAMESITE in None

Steps to reproduce the behavior

see above

Expected behavior

I think evidence should contain “Set-Cookie: AWSELBCORS”

Software versions

“@version”: “2.11.1”

Screenshots

No response

Errors from the zap.log file

No response

Additional context

No response

Would you like to help fix this issue?

• Yes

[agroszer]

@kingthorin what do I do? pointers please

[github-actions[bot]]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.