Simon Bennetts

FYI the help is now good 😁

Thanks for giving us a test case we can work on :) We'll have a play...

I definitely like the idea of people being able to disable all of these checks in one go. I do worry that moving them all into a new add-on will...

We could tag them as well?

We've discussed this on IRC and we like the idea of splitting the timing checks into different rules, but keeping them in the same add-ons. The alert tags would be...

I've updated the first comment with a list of all the rules that I could find which perform timing based attacks - anyone think of any that I've missed?

I'll see if I can reproduce this and/or make the templates more robust...

I've not been able to reproduce it so far, and `Caused by: ognl.NoSuchPropertyException: org.parosproxy.paros.core.scanner.Alert.tags` is confusing - not sure how that can happen with an up to date code base...

More details please. And any errors from the zap.log: https://www.zaproxy.org/faq/somethings-not-working-what-should-i-do/#check-the-log-file

@RumoEL there are not enough details here for us to reproduce this problem. Please add more details or we'll have to just close this issue.