At the moment ZAP only identifies parameters when they are used (eg while
proxying via ZAP) or when the Spider is invoked.
A very useful enhancement would be to identify parameters based on links and
forms, eg while passive scanning.
This could possibly use Spider functionality, but should not make any
additional requests.
Original issue reported on code.google.com by psii...@gmail.com on 26 Mar 2013 at 8:17
Original issue reported on code.google.com by
psii...@gmail.com
on 26 Mar 2013 at 8:17