Skip to content

Csti addon#3

Open
NabilKara wants to merge 458 commits into
mainfrom
csti_addon
Open

Csti addon#3
NabilKara wants to merge 458 commits into
mainfrom
csti_addon

Conversation

@NabilKara

Copy link
Copy Markdown
Owner

Overview

Briefly describe the purpose, goals, and changes or improvements made in this pull request.

Related Issues

Specify any related issues or pull requests by linking to them.


try {
driver.get(url);
Thread.sleep(1500);

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Check waiting strategies and best practices for Selenium, using a hardcoded waiting time can make Selenium miss some elements:
https://stackoverflow.com/questions/10720325/selenium-webdriver-wait-for-complex-page-with-javascript-to-load
https://www.selenium.dev/documentation/webdriver/waits/

private static final Logger LOGGER = LogManager.getLogger(ClientSideEngineDetector.class);
private static final ObjectMapper JSON = new ObjectMapper();

static final Map<String, String> TEMPLATES = new LinkedHashMap<>();

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ractive and Knockoutjs are not present in TEMPLATES

zapbot and others added 28 commits May 6, 2026 07:05
Update version and changelog for:
 - Linux WebDrivers
 - Windows WebDrivers
 - macOS WebDrivers

Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com>
Release the following add-ons:
 - Active scanner rules (alpha) version 57
 - Active scanner rules (beta) version 66
 - Active scanner rules version 82
 - Authentication Helper version 0.39.0
 - Client Side Integration version 0.23.0
 - Network version 0.27.0
 - OpenAPI Support version 56
 - Quick Start version 56
 - Report Generation version 0.45.0
 - Retire.js version 0.57.0
 - Technology Detection version 21.55.0

Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com>
Update version and changelog for:
 - Active scanner rules
 - Active scanner rules (alpha)
 - Active scanner rules (beta)
 - Authentication Helper
 - Client Side Integration
 - Network
 - OpenAPI Support
 - Quick Start
 - Report Generation
 - Retire.js
 - Technology Detection

Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com>
Update resources from Crowdin.

Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com>
Add the properties to release to Maven Central.
Fix JavaDoc errors.

Part of zaproxy/zaproxy#9311.

Signed-off-by: thc202 <thc202@gmail.com>
Signed-off-by: Simon Bennetts <psiinon@gmail.com>
Release the following add-ons:
 - WebSockets version 37

Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com>
Update version and changelog for:
 - WebSockets

Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com>
Signed-off-by: Simon Bennetts <psiinon@gmail.com>
Looks like github merge messed it up?

Signed-off-by: Simon Bennetts <psiinon@gmail.com>
Release the following add-ons:
 - Client Side Integration version 0.24.0
 - Import/Export version 0.20.0

Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com>
Update version and changelog for:
 - Client Side Integration
 - Import/Export

Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com>
Signed-off-by: Simon Bennetts <psiinon@gmail.com>
Prevent NPE from happening when shutting down ZAP due to high insight.

Signed-off-by: thc202 <thc202@gmail.com>
thc202 and others added 26 commits June 12, 2026 13:08
…-session

callhome: Exclude Auth Detection Session from Telemetry
Use `node.getNodeName()` instead of recomputing it differently.
This created Discrepancies in parsing. (see below)

If node names were not identical, access control silently fell back to the parent rule.

deleted now unused methods in UriUtils

request
```
curl -k 'https:/zaproxy.org//test/XML' --proxy http://127.0.0.1:8080 -H "Content-Type: text/xml"  \
  -X POST \
  --data-raw $'<note><to>Tove</to><from>Jani</from><heading>Reminder</heading><body>test</body></note>'
```

will generate the node with name `POST:XML()(<note:<to>,<from>,<heading>,<body>>)`

While accessControl would only have inferred the name `POST:XML`
Update resources from Crowdin.

Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com>
Stop the spider in a background thread since stopping might take some
time (e.g. shutting down browsers).

Signed-off-by: thc202 <thc202@gmail.com>
client: prevent GUI freeze when stopping spider
Updates based on RetireJS/retire.js@1bba964

Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com>
Update version and changelog for:
 - Retire.js

Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com>
Bumps the gradle group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [io.grpc:grpc-protobuf](https://github.com/grpc/grpc-java) | `1.81.0` | `1.82.0` |
| [dev.langchain4j:langchain4j](https://github.com/langchain4j/langchain4j) | `1.16.1` | `1.16.3` |
| [dev.langchain4j:langchain4j-azure-open-ai](https://github.com/langchain4j/langchain4j) | `1.16.1` | `1.16.3` |
| [dev.langchain4j:langchain4j-ollama](https://github.com/langchain4j/langchain4j) | `1.16.1` | `1.16.3` |
| [dev.langchain4j:langchain4j-open-ai](https://github.com/langchain4j/langchain4j) | `1.16.1` | `1.16.3` |
| [dev.langchain4j:langchain4j-google-ai-gemini](https://github.com/langchain4j/langchain4j) | `1.16.1` | `1.16.3` |
| [io.swagger.parser.v3:swagger-parser](https://github.com/swagger-api/swagger-parser) | `2.1.43` | `2.1.44` |
| [org.seleniumhq.selenium:selenium-java](https://github.com/SeleniumHQ/selenium) | `4.44.0` | `4.45.0` |


Updates `io.grpc:grpc-protobuf` from 1.81.0 to 1.82.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.81.0...v1.82.0)

Updates `dev.langchain4j:langchain4j` from 1.16.1 to 1.16.3
- [Release notes](https://github.com/langchain4j/langchain4j/releases)
- [Commits](langchain4j/langchain4j@1.16.1...1.16.3)

Updates `dev.langchain4j:langchain4j-azure-open-ai` from 1.16.1 to 1.16.3
- [Release notes](https://github.com/langchain4j/langchain4j/releases)
- [Commits](langchain4j/langchain4j@1.16.1...1.16.3)

Updates `dev.langchain4j:langchain4j-ollama` from 1.16.1 to 1.16.3
- [Release notes](https://github.com/langchain4j/langchain4j/releases)
- [Commits](langchain4j/langchain4j@1.16.1...1.16.3)

Updates `dev.langchain4j:langchain4j-open-ai` from 1.16.1 to 1.16.3
- [Release notes](https://github.com/langchain4j/langchain4j/releases)
- [Commits](langchain4j/langchain4j@1.16.1...1.16.3)

Updates `dev.langchain4j:langchain4j-google-ai-gemini` from 1.16.1 to 1.16.3
- [Release notes](https://github.com/langchain4j/langchain4j/releases)
- [Commits](langchain4j/langchain4j@1.16.1...1.16.3)

Updates `dev.langchain4j:langchain4j-azure-open-ai` from 1.16.1 to 1.16.3
- [Release notes](https://github.com/langchain4j/langchain4j/releases)
- [Commits](langchain4j/langchain4j@1.16.1...1.16.3)

Updates `dev.langchain4j:langchain4j-ollama` from 1.16.1 to 1.16.3
- [Release notes](https://github.com/langchain4j/langchain4j/releases)
- [Commits](langchain4j/langchain4j@1.16.1...1.16.3)

Updates `dev.langchain4j:langchain4j-open-ai` from 1.16.1 to 1.16.3
- [Release notes](https://github.com/langchain4j/langchain4j/releases)
- [Commits](langchain4j/langchain4j@1.16.1...1.16.3)

Updates `dev.langchain4j:langchain4j-google-ai-gemini` from 1.16.1 to 1.16.3
- [Release notes](https://github.com/langchain4j/langchain4j/releases)
- [Commits](langchain4j/langchain4j@1.16.1...1.16.3)

Updates `io.swagger.parser.v3:swagger-parser` from 2.1.43 to 2.1.44
- [Release notes](https://github.com/swagger-api/swagger-parser/releases)
- [Commits](swagger-api/swagger-parser@v2.1.43...v2.1.44)

Updates `org.seleniumhq.selenium:selenium-java` from 4.44.0 to 4.45.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Commits](SeleniumHQ/selenium@selenium-4.44.0...selenium-4.45.0)

---
updated-dependencies:
- dependency-name: io.grpc:grpc-protobuf
  dependency-version: 1.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: dev.langchain4j:langchain4j
  dependency-version: 1.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: dev.langchain4j:langchain4j-azure-open-ai
  dependency-version: 1.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: dev.langchain4j:langchain4j-ollama
  dependency-version: 1.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: dev.langchain4j:langchain4j-open-ai
  dependency-version: 1.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: dev.langchain4j:langchain4j-google-ai-gemini
  dependency-version: 1.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: dev.langchain4j:langchain4j-azure-open-ai
  dependency-version: 1.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: dev.langchain4j:langchain4j-ollama
  dependency-version: 1.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: dev.langchain4j:langchain4j-open-ai
  dependency-version: 1.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: dev.langchain4j:langchain4j-google-ai-gemini
  dependency-version: 1.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: io.swagger.parser.v3:swagger-parser
  dependency-version: 2.1.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.seleniumhq.selenium:selenium-java
  dependency-version: 4.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
...

Signed-off-by: dependabot[bot] <support@github.com>
Mention the dependency update.

Signed-off-by: thc202 <thc202@gmail.com>
ChromeDriver update to 149.0.7827.155

Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com>
Update version and changelog for:
 - Linux WebDrivers
 - Windows WebDrivers
 - macOS WebDrivers

Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com>
Update resources from Crowdin.

Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com>
Per recent remote CI workflows

Signed-off-by: kingthorin <kingthorin@users.noreply.github.com>
…edirs

Fix reference links redirecting or dead
Add ScriptDiagnosticSource with consolidated RunDiagnostics, step-level
recorder schema, automation session/builder, and JDO-backed report query
filtering. Flush progress output before failure reporting. Migrate Zest to
the interface so the scripts add-on builds before stdout collection (zaproxy#7453).

Signed-off-by: kingthorin <kingthorin@users.noreply.github.com>
Implement stdout accumulation in ZestZapRunner with chain provenance
attribution and expose collected lines via ScriptDiagnosticSource.

Signed-off-by: kingthorin <kingthorin@users.noreply.github.com>
Expose persisted script stdout in Traditional JSON Plus via the new
scriptdiagnosticsoutput section with report tests and help.

Signed-off-by: kingthorin <kingthorin@users.noreply.github.com>
reports: add script diagnostics output section
@NabilKara
NabilKara force-pushed the csti_addon branch 2 times, most recently from 7397f9d to 09df9a0 Compare June 21, 2026 12:09
Co-authored-by: Beraoud Abdelkhalek <89158254+beraoudabdelkhalek@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

10 participants