Rick M

Okay, I can just add a TODO if preferred

Done & done

Done

@megalucio are you able to answer the latest questions and keep going with this?

Test that test the current behavior, so that if changes in the future break it the tests will fail ci and we'll know.

I'm not convinced this is the right option/solution for either of these. For path traversal, I'm confused with your example because it flips between nix and windows, but either way,...

This doesn't resolve 7116, there are still other tasks (for other rules).

Sounds fine to me.

How are you launching the browsers? If not from within ZAP then how are they configured?

Up-to-date Chrome and Firefox?