Discontinuing JxBrowser

[psiinon]

Since 2017 we have provided an add-on that included JxBrowser, a closed source wrapper around Chromium.

Unfortunately TeamDev, the makers of JxBrowser, have recently decided to change their licensing policy and will no longer permit new versions to be included in open source projects.

While we have a perpetual license for JxBrowser v6 this version is unlikely to get any updates.

We wanted to include a modern browser with ZAP so that we could rely on it when automating add-ons that require one, such as the Ajax Spider and DOM XSS scan rule.

We do not believe that having access to an out of date browser provides any real benefit to the project or our users and so we plan to stop including the JxBrowser add-on with future ZAP versions.

We are aware of various alternative projects, such as java-cef but we do not know how much work will be involved in embedding this in a ZAP add-on or if it supports all of the platforms we would like.

What we would like to know is how many of you use the ZAP JxBrowser add-on. So please reply to this thread, or contact us directly, if you use it regularly.

If it is not used very much then there is no point in us spending a long time trying to replace it.

But also if anyone has had success in embedding a modern browser (ie Firefox or Chromium) in a cross platform open source project then please let us know that as well!

Many thanks,

Simon

--

OWASP ZAP Project leader

[psiinon]

We've not had any feedback about this so from now the weekly (and full) releases will not be including JxBrowser.

Cheers,

Simon

[thc...@gmail.com]

fyi, latest weekly release no longer includes JxBrowser.

Best regards.

On 20/06/2019 10:55, psiinon wrote:
> We've not had any feedback about this so from now the weekly (and full)
> releases will not be including JxBrowser.
>
> Cheers,
>
> Simon
>
> On Fri, Jun 14, 2019 at 3:23 PM psiinon <psi...@gmail.com> wrote:
>
>> Since 2017

>> <https://zaproxy.blogspot.com/2017/02/introducing-jxbrowser-add-on-for-zap.html>

>> we have provided an add-on that included JxBrowser, a closed source wrapper
>> around Chromium.
>>
>> Unfortunately TeamDev, the makers of JxBrowser, have recently decided to
>> change their licensing policy and will no longer permit new versions to be
>> included in open source projects.
>>
>> While we have a perpetual license for JxBrowser v6 this version is
>> unlikely to get any updates.
>>
>> We wanted to include a modern browser with ZAP so that we could rely on it
>> when automating add-ons that require one, such as the Ajax Spider and DOM
>> XSS scan rule.
>>
>> We do not believe that having access to an out of date browser provides
>> any real benefit to the project or our users and so we plan to stop
>> including the JxBrowser add-on with future ZAP versions.
>>
>> We are aware of various alternative projects, such as java-cef

>> <https://bitbucket.org/chromiumembedded/java-cef/src/master/> but we do

>> not know how much work will be involved in embedding this in a ZAP add-on
>> or if it supports all of the platforms we would like.
>>
>> What we would like to know is how many of you use the ZAP JxBrowser
>> add-on. So please reply to this thread, or contact us directly, if you use
>> it regularly.
>>
>> If it is not used very much then there is no point in us spending a long
>> time trying to replace it.
>>
>> But also if anyone has had success in embedding a modern browser (ie
>> Firefox or Chromium) in a cross platform open source project then please
>> let us know that as well!
>>
>> Many thanks,
>>
>> Simon
>>
>> --

>> OWASP ZAP <https://www.owasp.org/index.php/ZAP> Project leader
>>
>
>