Simon Bennetts comments

Results 684 comments of


                                            Simon Bennetts

Add CSP helper add-on

HUD forces HTTPS when connecting to port 443 that is HTTP only

@smandon is that with the HUD turned on? If so can you try again with the HUD turned off? You can turn it off via the 'radar' icon on the...

HUD forces HTTPS when connecting to port 443 that is HTTP only

@smandon thanks for reporting this. We've just moved it as the HUD issues are in its own repo.

HUD forces HTTPS when connecting to port 443 that is HTTP only

@ztgrace we have to upgrade the connection to https in order for the HUD to work. However ZAP should handle this internally even if the application doesnt. It looks like...

HUD forces HTTPS when connecting to port 443 that is HTTP only

Yeah, we could have an option for ZAP to handle the https comms even if a site appears to support it.

HUD forces HTTPS when connecting to port 443 that is HTTP only

@knuckerr have you got the latest version of the HUD? The HUD should handle the TLS side even if your site doesnt. The latest version of the HUD has some...

HUD forces HTTPS when connecting to port 443 that is HTTP only

Thats weird, and not what I expected at all :( None of the errors in the zap.log file or those browser console message look relevant. Can you tell why the...

Tidy up loggers

I have no real preference between `LOG` and `LOGGER` - and agree that consistency is always good 😄

HUD JS inject breaks site code

TBH I expected more problems like this, so thanks for these details :)

Apply Strict Mode to all JS files

File by file sounds like a v good plan :) Do we have any other linting / formatiing that could be applied at the same time? Maybe something along the...