zaproxy / zaproxy/zaproxy

UI enhancement to navigate to each XSS value in the response.

Open
#2,598 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Component-UI enhancement
Dominant language
Java
Stars
15.8k
Forks
2.6k
Avg merge
13h 16m
Merged PRs (30d)
17

Description

This is the 2nd half of the issue first raised in #2584. The referenced issue asks the XSS rules to indicate the number of times that a reflected XSS payload is found unmodified in the response.

This issue is to add a UI feature, once #2584 has been implemented, that supports the ability to easily navigate to each instance in the response. By default, when you select an XSS issue, it shows the response and scrolls to the location where the 1st instance exists (and highlights it), and this is great. If there are multiple instances, could some kind of Show Next/Show Previous buttons be added to the Alert tab so you could easily traverse through each additional place where its echoed in the response?

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing issue #2584 and the existing Alert tab behavior when an XSS issue is selected. Trace how the response is displayed, how the first reflected instance is located and highlighted, and where the alert UI can expose navigation controls. Done means multiple echoed instances can be visited with Show Next and Show Previous while the selected instance remains highlighted.

Written by the indexing model from the issue text.

Assessment

Domain
frontend
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.