After a test appscan reports the occurrence of lot of hidden files which you know for sure your application does not contain. What do you think happened?
Somebody put those files there during the test
Appscan created those files
Third party domain was not excluded from the scan
It’s a result of cross site scripting attack