search

theratpack / grails-zap-security-tests-plugin

Grails plugin to run security tests using the OWASP's Zed Attack Proxy
6 stars 4 forks source link

Issues when running on Grails 2.3.1 #2

Open swiftanthony opened 10 years ago

swiftanthony commented 10 years ago

I am using Ubuntu 64 bit, java version "1.7.0_21", grails version "2.3.1".

I adapted sample application to use newer Grails and ChromeDriver with proxy for functional testing (I could send this application, unfortunately GitHub won't accept archive as attachment).

When I execute:

grails -Dserver.port=8070 test-app functional: -zap

ZAP is loaded, OWASP ZAP session is created, all tests pass, but at the point of ZAP scanning I get following error:

| Spidering []... | Error Fatal error running tests: org.zaproxy.clientapi.core.ClientApiException: Missing Parameter(missing_parameter) : url (Use --stacktrace to see the full trace)

If I hardcode baseUrl in _Events.groovy to baseUrl = "http://localhost:8070" I get eventually a different error:

| Spidering [http://localhost:8070]... | Active scanning [http://localhost:8070]... | Storing ZAP session at /home/swift/Desktop/grails-zap-geb-sample-app-master//home/swift/Desktop/grails-zap-geb-sample-app-master/target/test-reports/zap/zapReport-2013-10-25-14-29-55... | Checking ZAP alerts... | Stopping OWASP ZAP Proxy... | Error Fatal error running tests: No signature of method: org.codehaus.groovy.grails.test.runner.phase.FunctionalTestPhaseConfigurer.cleanup() is applicable for argument types: () values: [] Possible solutions: cleanup(groovy.lang.Binding, java.util.Map), cleanup(groovy.lang.Binding, java.util.Map), sleep(long), sleep(long, groovy.lang.Closure), grep(), any() (Use --stacktrace to see the full trace)

luque commented 8 years ago

Please try the latest version 0.1.3. We have added support for the latest ZAP version (2.4.3) because its API changed. We already have updated the sample application to use Grails 2.5.3 version.