Update shell-history.yaml

misconfiguration/shell-history.yaml

@@ -20,7 +20,6 @@ requests:
     matchers:
       - type: word
         words:
-          - "ls"
           - "mkdir "
           - "chmod "
           - "mv "
@@ -34,6 +33,7 @@ requests:
         condition: or
 
       - type: word
+        part: response
         words:
           - "<?xml"
           - "<env"
@@ -42,7 +42,7 @@ requests:
           - "application/xml"
           - "html>"
           - "text/html"
-        part: response
+          - "image/"
         negative: true
 
       - type: status