thc202

Results 1126 comments of thc202

Please, make sure to link to related issues: zaproxy/zaproxy#7122 and zaproxy/zaproxy#7148.

> Added a payload `alert(1)` in directAttack function The payload is being added everywhere, see usages of `GENERIC_SCRIPT_ALERT_LIST`.

Use Java 17 as mentioned in https://www.zaproxy.org/docs/developer/quick-start-build/#preparation

I'd suggest testing just the add-on you are changing, `./gradlew :aO:ascanrules:test` (you can also just run the test for this specific scan rule). That error is most likely related to...

Depends on the tests, you need to check the assertions and see if the tests need to be updated (e.g. other attack being used) or the new code changes corrected...

The `spotlessApply` is still needed.

Did you check the ZAP log? More likely you are not allowing your client to access the ZAP API (https://www.zaproxy.org/faq/how-can-i-connect-to-zap-remotely/).