Skip to content

Changed URLs imply other exclusion filters for ZAP #2052

@rudosch

Description

@rudosch

The new release 2025.2 uses different URLs for the periodic requests in the background:

URLs used in 2023.8

GET http://localhost:8080/WebGoat/service/lessonmenu.mvc HTTP/1.1
GET http://localhost:8080/WebGoat/service/lessonoverview.mvc HTTP/1.1

URLs used2025.2

GET http://localhost:8080/WebGoat/service/lessonmenu.mvc HTTP/1.1
GET http://localhost:8080/WebGoat/service/lessonoverview.mvc/HttpProxies.lesson HTTP/1.1

Thus the recommended exclude filter for ZAP (as stated in section "General/HTTP Proxies", step 4) should be adapted from
.*lesson.*.mvc
to
.*lesson.*.mvc.*

Alternative:
Go back to previous URLs.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions