Disable cache - deleting cache headers

[roisec]

Is your feature request related to a problem? Please describe.

Hi I am trying easily to disable the cache for all the requests. Some requests are cached, and I want to see the complete original response. In burp proxy, there is an easy solution to do that: The cache headers are: If-Modified-Since If-None-Match

Describe the solution you'd like

Out-of-the-box support to disable cache in ZAP proxy

Describe alternatives you've considered

Using ZAP scripts?

Screenshots

No response

Additional context

No response

Would you like to help fix this issue?

• [ ] Yes

[thc202]

https://www.zaproxy.org/docs/desktop/addons/replacer/

[roisec]

thanks @thc202 Is there any option to set the config using a file? If I would like to use it on CI/CD and load static config for this?

[kingthorin]

You can add Replacer rules via the Web API: https://www.zaproxy.org/docs/api/#replaceractionaddrule

[psiinon]

You can use the Automation Framework 😁 https://www.zaproxy.org/docs/automate/automation-framework/ https://www.zaproxy.org/docs/desktop/addons/replacer/automation/

[kingthorin]

These could be added as default Replacer rules, however they'd still ship initially disabled. I currently have a PR in-flight that's adding some handling to disable Report-To / Report-Uri after that's dealt with I'd be happy to tackle this. In CI/CD you'd still need to handle them somehow.

[kingthorin]

Did you close this on purpose? Should we not add rules for this?

[roisec]

Yes, if I able to enable rules automatically on CICD then it would work fine.

[kingthorin]

Well automatically via the API or Automation Framework.

[thc202]

If you are going to do work through the API/AF, you can already add/enable them, no need to wait for default rules.

[kingthorin]

💯 %

[kingthorin]

Done in zaproxy/zap-extensions#5413

[github-actions[bot]]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.