Disable cache - deleting cache headers about zaproxy HOT 11 CLOSED

You can use the Automation Framework 😁
https://www.zaproxy.org/docs/automate/automation-framework/
https://www.zaproxy.org/docs/desktop/addons/replacer/automation/

from zaproxy.

These could be added as default Replacer rules, however they'd still ship initially disabled. I currently have a PR in-flight that's adding some handling to disable Report-To / Report-Uri after that's dealt with I'd be happy to tackle this. In CI/CD you'd still need to handle them somehow.

from zaproxy.

Yes, if I able to enable rules automatically on CICD then it would work fine.

from zaproxy.

If you are going to do work through the API/AF, you can already add/enable them, no need to wait for default rules.

from zaproxy.

https://www.zaproxy.org/docs/desktop/addons/replacer/

from zaproxy.

thanks @thc202
Is there any option to set the config using a file?
If I would like to use it on CI/CD and load static config for this?

from zaproxy.

You can add Replacer rules via the Web API: https://www.zaproxy.org/docs/api/#replaceractionaddrule

from zaproxy.

Did you close this on purpose? Should we not add rules for this?

from zaproxy.

Well automatically via the API or Automation Framework.

from zaproxy.

💯 %

from zaproxy.

Done in zaproxy/zap-extensions#5413

from zaproxy.