Comments (6)
"Open the context" - are you doing this in the ZAP Sites Tree or in the AF Environment?
from zaproxy.
"Run the job in order to get the context held in the yml file to display (this in it's self is very confusing)"
So it sounds like you are editing the Context in the Sites Tree.
This is a missunderstanding :)
The AF plan context can be accessed via the plan Environment.
Updating the Context in the Sites Tree will not update the plan - they are 2 separate things.
from zaproxy.
Ok thats begining to make some sense. I'm actually working my way though through your videos and I've just come accross this bit the editing of the paths directly in the plan.
I think some the of the confusion on my part is that it does take the include and exclude paths from the context pane the first time you create the plan. It also takes the authentication information and puts it in the yml. Loading the automation plan will cause the context editor to appear in the tree ui when run. So the two do appear to be intrinsicly linked.
from zaproxy.
Thats right.
You can create a plan using an existing context, and running a plan created a context.
But updating the context in the Sites Tree does not change the plan.
You can however update the context in the plan.
I can see why this is confusing 😉
from zaproxy.
So I think this is a misundersatanding rather than a bug - ok for us to close this @danbuntu ?
from zaproxy.
Yes very happy to close it. Thank you very much for your help.
from zaproxy.
Related Issues (20)
- Add support for Max Alerts Per Rule to Websocket Passive plugins
- This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs. HOT 3
- Update Webswing to remove several CVEs HOT 5
- generate csv on python after scan HOT 2
- Add endpoint for the Token Generation and Analysis plugin HOT 3
- Basic permissions broken for docker use HOT 9
- Scan report does not have enough details on the alerts HOT 15
- OutOfMemoryError leads to hangs/crashes when autoscanning specific sites HOT 11
- Unexpected hash for downloaded add-on HOT 1
- Exception "connection pool shut down" appears when starting autoscan again after stop HOT 2
- Sections' options might not be fully shown in Generate Report dialog HOT 8
- Update alert http links HOT 31
- ZAP did not store scanning session info when unexpected OS restart happened HOT 7
- PII Disclosure rule should not report on JS files by default HOT 12
- ZAP hanged when creating new session after completed autoscan of specific site HOT 3
- ZAP unable to autoscan some specific sites which other similar tools can scan HOT 7
- ZAP continue to load CPU without scan after creating new session after completed autoscan HOT 1
- ZAP should provide ability to pause autoscan and continue scan after pause HOT 6
- Passive scan results might leak into a different session with slow scan rules HOT 13
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from zaproxy.