zaproxy / zaproxy/zaproxy

Regex based includes/excludes for Zest Recorder

Open
#5,736 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

add-on enhancement in:zest
Dominant language
Java
Stars
15.8k
Forks
2.6k
Avg merge
13h 16m
Merged PRs (30d)
17

Description

Is your feature request related to a problem? Please describe.
When I'm recording a Zest authentication script for some complex sites, I'm redirected to several authentication servers before finally being sent back to the original site in an authenticated state. A lot of these in between sites are loading .js and .css files that aren't really necessary for the Zest script to have. Being able to exclude these files along with irrelevant tracker requests would save me time from manually deleting them from my Zest script.

Describe the solution you'd like
Right now when recording a Zest script, there is the prefix selection that allows for some URL filtering. I propose that this be replaced with Included/Excluded regex boxes similar to how Context's work.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating the Zest Recorder implementation and its existing prefix-selection flow. Trace how recorded URLs are filtered, then define the included and excluded regex behavior and verify that authentication redirects, scripts, stylesheets, and tracker requests are handled as intended.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
security, tooling
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.