HTML and JavaScript comments are listed in vulnerability list
– HTML & JavaScript Comments vulnerabilities are disclosures of internal information caused by any comments in HTML or
JavaScript present in pages. The SmartAttack examines responses containing HTML or JavaScript, and reports any
comments observed therein. The significance of such vulnerabilities depends on the specific disclosures involved and the
policies of the organization.