Resolved! Where does User Credential Detection search?
I have just turned this on and it's coming up with some really useful (and quite scary) alerts but in a few cases, the URL it is flagging up is pretty innocuous and doesn't include anything resembling the user name or password, so what is it matching on? Is it possibly searching cookie content as well? In an example I have followed up, the URL ...




