The default context is not workable when users export the report.

[sunny shi]

Hi Team,

I chose the Default Context to export the report. But it will export all alerts, including some URLs that are not included in the Default Context. Please help me check it. Thanks.

[thc202]

Hi,

What ZAP version are you using?

It's unclear from the information provided if the problem is related to
the context or the fact that the report includes alerts that were
flagged as false positive. Can you confirm which?

Best regards.

[sunny shi]

Thanks for your support. I use the ZAP Version 2.17.0.

Let me clarify my problem. Previously, when we manually scanned our website, it would extract five websites in the site tree.  We only have two websites that we want to scan, and then we added two URLs to the Default context to scan.  After finishing the scan, it will show all alerts, including three websites that we don't want to show in the report.  And when we choose the default context, the number of alerts will show 1,0,6,6

However, when we export the report after choosing the default context. It will export all alerts(1,2,7,6), including other websites that we don't add to the default context. We want it can show 1,0,6,6 when we choose the default context to export the report. It was workable in the previous version, but now it is not workable for the latest version.

[Simon Bennetts]

Thanks for letting us know - its a bug which will be fixed by this PR https://github.com/zaproxy/zap-extensions/pull/7040

Cheers,

Simon