Location data is essential for correlation. Results that have the same location type and value might be candidates for correlation, depending on the location type.
Location types are as follows:
- File, Logical paths: Line ranges must at least overlap. Results without a line range will only be correlated with other results without a line range, and vice-versa. Column ranges are ignored.
- URL paths: The "Element" for both results must match exactly. An "Element" refers to the type and name of the part of the request that was indicated as vulnerable. If a result indicates that the query parameter "user" is vulnerable, that result will only correlate with other results with an Element of "Query Parameter ('user')".