Simon Bennetts

@muffinresearch in this case its our CDN (right?) so I dont think its a blocker. SRI is a great protection when using files on other peoples CDNs where you have...

Yeh, def worth trying - good spot

thats true, the API wasnt intended to support applying them to existing alerts, although it could be extended to do so

But that wont solve this issue will it? If the filter is being correctly applied before the alerts are raised then it will make no difference...

Waiting for confirmation they use ZAP - https://forallsecure.com/blog/the-mayhem-for-api-difference-a-zap-mayhem-for-api-scan-comparison seems to imply they dont :/

It would :) Cant see me having time to implement it though I'm afraid :( But if anyone else fancies having a go...

In theory yes, but it looks like it needs a significant rewrite :/

trimWhitespace ?

@rezen yes please! As you know we're not graphic designers :P FYI theres an open PR which will slightly change the format, but not that significantly: https://github.com/zaproxy/zap-admin/pull/398

Completely agree, but I dont think it derails anything. The changes I've made should make that easier to do. @rezen can you convert the website to use json or yaml...