Route exclusion and inclusion
In situations where you require a specific percentage of route coverage for security reasons, Contrast provides an option to exclude irrelevant or inaccessible routes from route coverage calculations.
You can choose to re-include any routes that you excluded previously.
Effects of route exclusion
Contrast collects vulnerability data for excluded routes, but excludes this data from application scoring calculations.
Excluding a route excludes it from all environments where Contrast discovers it.
You cannot exclude a route that has an open vulnerability associated with it (a status of Reported, Suspicious, or Confirmed). You must resolve it or change the status to Not a Problem.
If you defined session metadata to exercise and discover routes in an application, excluding a route also excludes this data.
The audit log includes an entry for each route that you exclude.
Effects of route inclusion
Contrast includes data for the included route in application scoring calculations.
Including a route includes it in all environments where Contrast discovers it.
The audit log includes an entry for each route that you include.