regex to exclude login/logout urls from context

[SimsHere]

Hi team,

I want to exclude login/logout urls from context for all applications scanned by zap and in trying to do do, I want to add the regex in the option "URLS which will be excluded from context".

For example, I want to exclude any url which contains the following keywords: signin, signout, login, logout.

Can I define regular expressions like below in " "URLS which will be excluded from context" :

\Qlogin\E

\Qlogout\E

\QSignin\E

\Qsignout\E

Thanks,

Kamalpreet

[Simon Bennetts]

Hi Kamalpreet,

Try it in the ZAP desktop and see :)

All of the Site tree noted that are inscope have a target icon on them.

You can test your regexs like this even if you plan to automated ZAP.

Cheers,

Simon

[SimsHere]

Thanks Simon. Will try it.

Can I use the java based regular expressions to define these exclude conditions:

https://docs.oracle.com/javase/7/docs/api/java/util/regex/Pattern.html

Thanks,

Kamalpreet

[Simon Bennetts]

Yes.

But you can also just right click the relevant URLs in the Sites tree or History and select the option to exclude them from the context.