Alerts tab not displaying all filtered alerts properly?

[Adam Risch]

This is a problem I had noticed previously but misunderstood I think - see https://groups.google.com/g/zaproxy-users/c/Dm51Q9GwD6U .

I have some alert filters setup but when I run my scan and look at the Alerts tab, some of them don't seem to be getting filtered correctly, at least in that tab. They do seem to be getting filtered out of the reports I run at the end of my scan plan, but one of them is set to filter to "info" and it's not showing up in the report that displays the info messages either. Which I'm less concerned about than the fact that the Alerts tab makes it look like these are actual findings. 

For example, in the attached image below, the two "low" findings at the top of the image should be getting filtered, one to "info" and the "other" to "false positive", but the alerts tab displays them as low findings. You'll noticed that there's no arrow to the left of these two, they can't be expanded, and that seems to be the tipoff that that these are messages that aren't getting filtered correctly. Unless I'm misunderstanding something this seems like a bug to me.

[Adam Risch]

Additional info:

These are the relevant alert filters from the scan plan:

- ruleId: 10054
  ruleName: Cookie without SameSite Attribute (10054)
  newRisk: Info
  parameter: (_opensaml_.*)|(_shib.*)|(TKTID)|(_tracker_visit)
  parameterRegex: true

 - ruleId: 10096

   ruleName: Timestamp Disclosure (10096)

   newRisk: False Positive
   url: https://biolincc.nhlbi.nih.gov/studies/.+?/
   urlRegex: true

For the first alert filter above, the url/cookie which "evades" the filter so to speak varies from scan to scan, sometimes it's the "_tracker_visit" cookie, other times it's "TKID".

For the second alert filter, it always seems to be the same url, https://biolincc.nhlbi.nih.gov/studies/mds/, but I don't understand why that url isn't getting filtered just like several other similar urls, for example, https://biolincc.nhlbi.nih.gov/studies/a_treat/ gets filtered every time.