xul.dll is a Firefox file that we include in Zotero. We don't re-sign it, since Windows itself doesn't enforce code signatures on DLLs. It sounds like Tenable does.
I don't think anyone else has ever reported a problem with this, but we'll look into re-signing all DLLs during the build process.
In the meantime, if you or your IT department is able to mark this as a false positive, you should do so.
I don't think anyone else has ever reported a problem with this, but we'll look into re-signing all DLLs during the build process.
In the meantime, if you or your IT department is able to mark this as a false positive, you should do so.
https://s3.amazonaws.com/zotero.org/images/forums/u15779595/6pmfciyjtdgpkvgtwemw.png
https://s3.amazonaws.com/zotero.org/images/forums/u15779595/md9phju3s6ubqhgpibdx.png
You're right, Windows doesn't care, but Tenable sure does. Doesn't like the Mozilla signature and/or the DigiCert co-signature.