https://www.zaproxy.org/blog/2025-12-05-react2shell-detection-with-zap/
As you’ll see we’ve decided to promote the new React2Shell active scan rule directly to release!
Was that a good call or not?