Simon Bennetts

We're relying on Java to launch the browser. I guess in this case we could use selenium and not proxy through ZAP?

@riccardo-algorime can you share suitably redacted snippets of the relevant HTML in the DOM? Without that theres not much we can do - we have nothing to work with :/

It looks like the submit button is disabled by default. What validation is being done before that is enabled? I guess the form cant be submitted via "enter" unless the...

 **Checkmarx One – Scan Summary & Details** – [301e6850\-38c1\-40d2\-96e7\-0580ee144c38](https://eu.ast.checkmarx.net/projects/a374f302-8fbf-417e-ab6b-447e483b0a83/scans?id=301e6850-38c1-40d2-96e7-0580ee144c38&branch=thc202%2Fpointer-elements) ### Great job, no security vulnerabilities found in this Pull Request

 **Checkmarx One – Scan Summary & Details** – [3f78c1bb\-14a3\-4d0b\-9aac\-b898d06c4b51](https://eu.ast.checkmarx.net/projects/f9121e40-c915-4b13-bb15-36d946943fd8/scans?id=3f78c1bb-14a3-4d0b-9aac-b898d06c4b51&branch=psiinon%2Fdownload%2Funsigned) ### Great job, no security vulnerabilities found in this Pull Request

First of all - many thanks for the feedback. We actually get very little detailed user experience feedback, so this is very helpful. For context: what is your background (dev/qa/security)...

Thanks. The reason we dont make the port and certificate more obvious is because we think this is actually a worse user experience (apart from the fact it hasnt worked...

 **Checkmarx One – Scan Summary & Details** – [a9c06f97\-a713\-4a63\-bd30\-138615af3e06](https://eu.ast.checkmarx.net/projects/f9121e40-c915-4b13-bb15-36d946943fd8/scans?id=a9c06f97-a713-4a63-bd30-138615af3e06&branch=kingthorin%2Fdocker-tweaks) New Issues (2) Checkmarx found the following issues in this Pull Request Severity|Issue|Source File / Package|Checkmarx Insight ---|---|---|--- |Missing User...

Thanks! Testing this on my Mac right now...

Works for me 😁 I'll getting a load of errors like: `WARN Raw HTML omitted while rendering "/app/site/content/blog/2023-05-23-authentication-tester/index.md"` but they could just be things we should have spotted before?