HelpUiDialogsAddalert - psiinon/zap-core-help GitHub Wiki
This dialog allows you to manually add or change an Alert associated with a specific request.
The dialog has the following fields:
The type of the alert is a pull down field which allows you to select one of a prepopulated set of issue types. You can also enter your own text or change the text of one of the items you selected. If you select one of the existing types then the Description, Solution and Other Info fields will be populated with text associated with the item you chose.
A pull down field which allows you to specify how serious you think the risk is:
Informational | ||
Low | ||
Medium | ||
High |
A pull down field which allows you to specify how confident you are in the validity of the finding:
False Positive | for potential issues that you later find are not exploitable | |
Low | for unconfirmed issues | |
Medium | for issues you are somewhat confident of | |
High | for findings you are highly confident in | |
Confirmed | for confirmed issues |
A pull down field which allows you to specify which parameter the issue is associated with.
The field is prepopulated with any URL and FORM parameters found, but you can also enter your own parameter name.
Array parameters (in URL query component and x-www-form-urlencoded
request body) are identified with its index. For example, for a request containing choices[]=ChoiceA&choices[]=ChoiceB
the first parameter would be identified as choices[0]
and the second as choices[1]
.
A general description of the type of issue found. This is populated when you select one of the predefined types, but you can also change it as required. Note that any changes you make will be lost if you select another type.
Information specific to the particular issue you have found. This is not prepopulated.
Recommendations about how to fix the issue. This is populated when you select one of the predefined types, but you can also change it as required. Note that any changes you make will be lost if you select another type.
One or more URLs pointing to more information on the internet about the selected type of alert. This is populated when you select one of the predefined types, but you can also change it as required. Note that any changes you make will be lost if you select another type.
History tab | 'New Alert...' right click menu item | |
Alerts tab | double clicking on an existing alert |
UI Overview | for an overview of the user interface | |
Dialogs | for details of the dialogs or popups |