search

intruxxer / zaproxy

Automatically exported from code.google.com/p/zaproxy
0 stars 0 forks source link

Unable to reliably know if the spider has (already) started (Java API) #629

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
It's not possible, using the Java API, to reliably know if the spider has 
(already) started.

The method ExtensionSpider.startScan(SiteNode) and others that start the spider 
return before the spider has actually started. The only way to know if the 
spider is spidering (thus started) is using the method 
ExtensionSpider.isScanning. As the method "startScan" returns before it has 
actually started, the method "isScanning" might return false, misleading the 
caller to think that the spider has already finished (when it's not even 
(fully) started).

The spider should (fully) start before returning from the methods "startScan", 
or should allow to observe the "start-up" state of the spider (or ...).

Remarks:
This may lead to issues like Issue 593.

ZAP Version:
Version 2.0.0.

Original issue reported on code.google.com by THC...@gmail.com on 15 Apr 2013 at 4:19