kasunkv / owasp-zap-vsts-task

Visual Studio Team Services build/release task for running OWASP ZAP automated security tests
MIT License
30 stars 11 forks source link

Filter to correct context root #45

Open insideou7 opened 4 years ago

insideou7 commented 4 years ago

Adds filter option to limit scans to URLs starting with the Target URL. Currently Zap will scan for files immediately off of the domain (e.g. http://mysite.com/robots.txt) even when the target URL has a context root (e.g. http://mysite.com/contextroot). This wouldn't normally be a problem but if you have multiple sites on the same domain using different context roots, the same issues get double reported.