zap-extensions
zap-extensions copied to clipboard
alertFilters: allow to filter by HTTP method
Allow to specify the method when creating alert filters.
Fix zaproxy/zaproxy#5967.
Is a regex the best option here? In the UI a list might be better - less chance of regex typos/mistakes breaking things...
With the regular expression you can apply the rule to several methods at once. The user can also create rules from existing alerts which would have the exact method.
I'm all for allowing rules to apply to one or more methods, just not sure a regex is the ideal user control. Wouldnt a multiselect be more user friendly and less error prone? Like in the History filter?
A multiselect/list would restrict which methods can be added though (History filter does not show all standardised methods, nor custom ones for that matter), so multiselect and free text field?
I support having both, and letting the text field override (or add to) the multi-select.
Should be ready for review.