Simon Bennetts
Simon Bennetts
FYI both of the spiders have test nodes added by default, and you can add more nodes via the buttons.
Yeah, I would have thought that should work as well, but I couldnt even get this far :/
I'd rather thay stayed mandatory - we can just quick off the tests again if they fail. But def agree we want to get to the bottom of the problems...
Because if they consistently fail then we have a problem. If they fail we restart them, if they fail several times in a row then we investigate.
We'll have to agree to disagree then :P I'm all for making them more reliable, but if they become option then we'll just ignore them and never fix them. I...
Just added a checklist to the first comment
As per https://groups.google.com/g/zaproxy-users/c/QZrQU-KGkWk/m/lThons3LAwAJ (and the later comment) the HUD _has_ to upgrade a site to HTTPS otherwise it cant work. And if the site doesnt handle HTTPS then ZAP handles...
I've got a PoC which allows you to test the HUD against a list of urls - it launches a browser (currently hard coded to firefox, but will support chrome),...
any thoughts on what would be the most useful format for displaying the results? (currently just write to the logs). Possibilities inc writing to a new file, a new lower...
Point made by @thc202 on irc - maybe an API end point that just reports progress and failure? Eg if we're testing 1M urls ;)