Release 1.2.0

Les modifications suivantes ont été apportées dans cette version :

Significant changes:

Memory Leaks

Memory leaks have been fixed in the scanner actif and spider.

Invoke applications

External applications can now be invoked from the Sites and History tabs.

Passive Scanner

The passive scanner now looks for vulnerabilities, such as:
    Autocomplete forms with password fields
    Cookies without the 'HttpOnly' flag
    SSL Cookies without the 'secure' flag
    Weak authentication

Changements mineurs :

XML Reports

A new 'Generate XML Report...' menu item is now included in the top level Reports menu.

Manual Request Editor and Resend dialogs

Requests submitted by the Editeur de requête and Renvoyer dialogs are now shown in the Sites and Historique tabs.
A new 'Method' pull down allows you to switch between the HTTP methods, this automatically moves parameters between the URL and the body when a POST method is selected or deselected.

Alerts UI

The Sites tab now shows any alerts as flags to the right of any node names.
The alert counts in the footer now show the number of different types of alerts rather than the total number of instances.

Active scanner delay option

The delay in milliseconds between each scanner actif request can now be set via the Options Active Scan screen. This will increase the time an active scan takes but will reduce the load on the target.

UI Changes

The Sites tab now takes up all of the left hand side - this can be changed back via the Options Display screen if required.

The 'toolbar' on the Requête, Réponse and Pause tabs and the Editeur de requête and Renvoyer dialogs is now at the top rather than the bottom.

The scanner counts in the footer are now displayed on the right hand side.

Voir aussi

     Introductionl'introduction de ZAP
     Releasesl'ensemble complet des releases
     Créditsles personnes et les groupes qui ont rendu cette release possible