HUD/Tutorial Enhancement Grab-bag

kingthorin commented 5 years ago

Based on email feedback. (These can be broken into different tickets if/when needed.)

[ ] Hud button sets movable?

Can you make the left/right HUD menus moveable? At least up/down? That way if they obscure anything, you can move them out of the way, rather than hiding them completely.
[x] Replay behavior?
When I'm looking at the request/response for a SiteAlert, when I:
- click on Reply in Console - the SiteAlert dialog just 'goes away' abruptly.
- click on Replay in Browser - that works, but it takes over the current browser tab. I'd recommend it do the replay in a new browser tab so you don't lose what you are doing in the current tab.
[ ] Reveal labels?

When Show / Enable has a white bulb, I think that's fine. But when it is a Yellow bulb, I think that choice should show: Hide / Disable to indicate you are turning it off. Or maybe On Show / Enable when its on, and Off Show / Enable when its off.
[ ] Tutorial completion, close button?

Tutorial Completed page: Needs a 'close/exit tutorial' button.

^ That one is similar to items mentioned here.

[ ] Dialogs moveable/sizeable?

In HUD, when you bring up a dialog, like Site Alerts, can you make the dialog both movable, and resizeable? ALL dialogs should be like that.
[ ] HTML Report truncate long strings?

When looking at an HTML report, one of the findings is Information Disclosure - Suspicious Comments, and the 'Other Information' row is HUGE. Looks like an entire minified .js file. Might be good to check the size of this content before including it, or only snip out the comment (if its not too long), and display that along with what file/line # it came from? Almost 30% of my report is that single row in the report.

^ It seems likely that someone commented out an entire file. That's more of a ZAP/pscan issue than HUD/Tutorial.

dscrobonia commented 5 years ago

Thanks @kingthorin for writing this up! I'm planning on splitting up some of these into ticktets later, so I check these off when I do that :)

avivmu commented 3 years ago

Any update on these?

kingthorin commented 3 years ago

As far as I know nothing has been tackled aside from the one Replay item.

zaproxy / zap-hud