Skip to content

Releases: zaproxy/zap-extensions

Windows WebDrivers version 105

25 Sep 08:51
b261996
Compare
Choose a tag to compare

Changed

  • Update ChromeDriver to 129.0.6668.70.

MacOS WebDrivers version 105

25 Sep 08:51
b261996
Compare
Choose a tag to compare

Changed

  • Update ChromeDriver to 129.0.6668.70.

Linux WebDrivers version 105

25 Sep 08:51
b261996
Compare
Choose a tag to compare

Changed

  • Update ChromeDriver to 129.0.6668.70.

Zest - Graphical Security Scripting Language version 47

24 Sep 12:23
2d06139
Compare
Choose a tag to compare

Fixed

  • Correctly handle added scripts with no engine name.

Technology Detection version 21.42.0

24 Sep 12:23
2d06139
Compare
Choose a tag to compare

Changed

  • Updated with enthec upstream icon and pattern changes.
  • Maintenance changes.

Selenium version 15.30.0

24 Sep 12:23
2d06139
Compare
Choose a tag to compare

Changed

  • Update Selenium to version 4.25.0.
  • Update script template:
    • selenium/Selenium default template.js - update documentation.

Retire.js version 0.40.0

24 Sep 12:23
2d06139
Compare
Choose a tag to compare

Changed

  • Updated with upstream retire.js pattern changes.

Quick Start version 50

24 Sep 12:23
2d06139
Compare
Choose a tag to compare

Changed

  • Rebrand to ZAP by Checkmarx.

Passive scanner rules version 61

24 Sep 12:22
2d06139
Compare
Choose a tag to compare

Changed

  • Maintenance changes.
  • Rename Mac OSX salted SHA-1 in the Hash Disclosure scan rule to "Salted SHA-1", reduce the associated alerts to Low risk and Low confidence, to align with other SHA related patterns it will only be evaluated a Low Threshold. (Note such matches may indicate leaks related but not limited to: MacOS X, Oracle, Tiger-192, Haval-192) (Issue 8624).
  • The Insecure JSF ViewState now includes example alert functionality for documentation generation purposes (Issue 6119).
  • The Absence of Anti-CSRF Tokens scan rule now only considers GET requests at Low Threshold (Issue 7741).

Network version 0.18.0

24 Sep 12:22
2d06139
Compare
Choose a tag to compare

Added

  • Send success/failure stats.

Changed

  • Stop retrying 429 and 503 responses, instead of waiting for retry-after (Issue 8627).

Fixed

  • Fix typo in log message.