ZAP 2.15.0 has been released

178 views
Skip to first unread message

psiinon

unread,
May 7, 2024, 3:20:10 PM5/7/24
to zaprox...@googlegroups.com, OWASP ZAP Developer Group
ZAP 2.15.0 is now available!
Read all about it: https://www.zaproxy.org/blog/2024-05-07-zap-2-15-0/

Thanks to everyone who contributed to it!

Simon

--
ZAP Project leader

Hector Luna

unread,
May 7, 2024, 3:32:28 PM5/7/24
to ZAP User Group
Thanks Simon.
Does 2.15.0 have support for loading graal scripts from zest via "add script" action?
Thanks!

kingthorin+zap

unread,
May 7, 2024, 4:00:49 PM5/7/24
to ZAP User Group
If you mean running GraalJs scripts from Zest, yes, now that's supported.

Hector Luna

unread,
May 7, 2024, 4:12:26 PM5/7/24
to ZAP User Group
Thank you. I will be giving that a try.
I am looking forward to moving away from nashorn and java 11.

Hector Luna

unread,
May 9, 2024, 3:57:04 PM5/9/24
to ZAP User Group
I keep getting this error when trying to run zest scripts that have reference to graal scripts...

javax.script.ScriptException: org.graalvm.polyglot.PolyglotException: ReferenceError: java is not defined
java.lang.IndexOutOfBoundsException: Index -1 out of bounds for length 0java.lang.IndexOutOfBoundsException: Index -1 out of bounds for length 0

Do I have to install graal as well?
I tried using jdk 11, and temurin 21. 

They both generate the same error.
Thanks!

kingthorin+zap

unread,
May 9, 2024, 7:31:37 PM5/9/24
to ZAP User Group
Do you have the ZAP graalvm add-on installed?

Hector Luna

unread,
May 9, 2024, 7:45:50 PM5/9/24
to ZAP User Group
This is the latest weekly release.
I just downloaded the D-2024-05-07 zip file. Expanded it and run it using "zap.sh"

It says it is already installed.

Screenshot 2024-05-09 at 6.44.47 PM.png

thc...@gmail.com

unread,
May 10, 2024, 4:51:52 AM5/10/24
to zaprox...@googlegroups.com
Hi,

That's an error caused by your script:
ReferenceError: java is not defined

(Which means the Graal JS engine is executing your script, which
wouldn't before.)


What are you trying to do?

Note that Zest runs the scripts (regardless of the engine) in its own
context not ZAP's one, so you will not be able to do everything that can
be done when running a script directly from ZAP.
(We could change that I guess, but at the moment that's the expected
behaviour.)

Best regards.
>>>>> ZAP <https://www.zaproxy.org/> Project leader
>>>>>
>>>>
>
Reply all
Reply to author
Forward
0 new messages