JS Chuah
unread,Apr 10, 2023, 5:18:20 AM4/10/23Sign in to reply to author
Sign in to forward
You do not have permission to delete messages in this group
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to OWASP ZAP User Group
Problem: formhandler defined in options.prop only work for field(0),(1),(2)
Environment: owasp/zap2docker-stable:s2023-04-04
Command: docker run -v $(pwd):/zap/wrk/:rw --user root -t owasp/zap2docker-stable:s2023-04-04 zap-api-scan.py -t ${openApiSpec} -f openapi -d -I -r zap_report_html.html -x zap_report_xml.xml -J zap_report_json.json -z "-configfile /zap/wrk/options.prop" --hook=LogMessagesHook.py
Content of my options.prop:
formhandler.fields.field(0).fieldId=appid
formhandler.fields.field(0).value=haha0
formhandler.fields.field(0).enabled=true
formhandler.fields.field(1).fieldId=createdby
formhandler.fields.field(1).value=haha1
formhandler.fields.field(1).enabled=true
formhandler.fields.field(2).fieldId=createddt
formhandler.fields.field(2).value=haha2
formhandler.fields.field(2).enabled=true
formhandler.fields.field(3).fieldId=updatedby
formhandler.fields.field(3).value=haha3
formhandler.fields.field(3).enabled=true
formhandler.fields.field(4).fieldId=updateddt
formhandler.fields.field(4).value=haha4
formhandler.fields.field(4).enabled=true
formhandler.fields.field(5).fieldId=version
formhandler.fields.field(5).value=haha5
formhandler.fields.field(5).enabled=true
Observation: in req-resp-log.txt log, field(0), (1), (2) are replaced with correct value, but other fields are
"updatedBy":"John Doe"
"updatedDt":"1970-01-01T00:00:00.001Z"
"version":10