zaproxy / zaproxy/zaproxy

OpenAPI Extension: Action Returns Unexpected Response?

Open
#3,951 9 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

add-on Component-API in:openapi Usability
Dominant language
Java
Stars
15.8k
Forks
2.6k
Avg merge
13h 16m
Merged PRs (30d)
17

Description

Steps to reproduce:

  1. Configure ZAP UI to be accessible as a local proxy.
  2. Browse to http://localhost/UI/openapi/action/importUrl/ and provide a valid URL.
  3. Open the network debugger of your browser's development tools.
  4. Press "importUrl".
  5. Now {"importUrl":[]} is the response. Instead something with "OK" is expected as all the other options do it.
    Also in case of an import error I would expect something different than a 200 status (but actually there is no distinction).

Thank you for looking into it. :)

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the OpenAPI action at /UI/openapi/action/importUrl/ and compare its response with the other OpenAPI actions. Check the response for a successful import and for an import error; done means success is distinguishable from failure and the HTTP status and response body match the expected behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
java, openapi
Domain
api
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.