fix(exposures): add negative html matcher to laravel-env (False Positive)

[vatsalgargg]

Description

This PR resolves a false positive in the laravel-env.yaml template. The previous logic was vulnerable to soft 404s and developer blogs where .env configurations were discussed in the HTML body.

Added a negative matcher for text/html in the header to ensure the template only triggers on actual raw environment files.

[neo-by-projectdiscovery-dev]

Neo - Nuclei Template Review

No security issues found

2 issues fixed in this PR

Highlights

• Fixed YAML structure by properly indenting matchers-condition directive
• Replaced generic header matcher with specific DSL check on content_type variable
• Template now correctly filters HTML responses to prevent false positives from soft 404s and blog posts

Hardening Notes

• Consider adding a DSL matcher to verify minimum body length (e.g., 'len(body) > 50') to further reduce false positives from empty or minimal responses
• The template could benefit from checking for additional Laravel-specific patterns like 'MAIL_MAILER=' or 'SESSION_DRIVER=' in the regex matcher to increase detection confidence

_{Comment @pdneo help for available commands. · Open in Neo}