Exclude HTTP methods from site tree / proxy / context /

17 views
Skip to first unread message

Tuxlu

unread,
Oct 22, 2025, 12:40:51 PMOct 22
to ZAP User Group

Hello, I'm trying to test a site with some automated scans (ex: with the access control plugin ) 

But it's a site that loves to do OPTIONS requests before each request. And I don't want to test them.


I can delete them from the site tree, but manually and I can't filter them to delete them in one go.


If I delete all Option requests from my history, and refresh the site tree, and refresh the site tree, the requests are still there on the tree (maybe it's not a bug, but a feature, don't know)


I can filter URLs in the context, but not methods.


So is there a way to filter HTTP methods in the site tree, context, or proxy?


A temporary solution I could have is with the Replacer, replace "OPTIONS https://mysite.com/" with "OPTIONS https://localhost/dontCareAbout Options"

(But it won't work for previous requests)



Thanks in advance for your help


Simon Bennetts

unread,
Oct 28, 2025, 8:38:41 AM (9 days ago) Oct 28
to ZAP User Group
Unfortunately not :/

We do have an open issue for this: https://github.com/zaproxy/zaproxy/issues/8686

If you give issues a "thumbs up" in the first comment then they rate higher when we review them .. just saying ;)

Cheers,

Simon
Reply all
Reply to author
Forward
0 new messages