product · inferred from evidence
zap-extensions
A repository or collection of extensions for ZAP (Zed Attack Proxy).
- ZAP Backup File Disclosure false positives on HTTP 400 responses
ZAP raised Backup File Disclosure alerts on responses that were plain HTTP 400s with empty bodies, which are obviously false positives. The backup file scan rule was matching on responses it should have ignored.