Network version 0.2.0

Added

• On weekly releases and versions after 2.11:
  • Management of local servers/proxies, supersedes core functionality;
  • Configuration of aliases for the servers/proxies (Issue 3594);
  • Pass-through connections (Issue 6832).

Report Generation version 0.13.0

Changed

• Dependency updates.
• Replace variables present in reportDir and reportFile when running the automation job.

Passive scanner rules (beta) version 29

Changed

• Update minimum ZAP version to 2.11.1.
• Maintenance changes.

Removed

• Content Security Policy (CSP) Header Not Set scan rule promoted to release.

Passive scanner rules version 40

Changed

• Clarify the alert solution for the Cache Control scan rule.

Added

• Content Security Policy (CSP) Header Not Set scan rule promoted to release.

GraphQL Support version 0.9.0

Changed

• Replace variables present in schemaFile when running the automation job.

Automation Framework version 0.14.0

Added

• Import Job profile (Issue 7078).

Changed

• The ascan job 'Scan All Header' GUI label

Fixed

• Register plans run by -autorun to prevent NPEs when editing them
• Issue when turning off specific active scan rules

Active scanner rules (alpha) version 37

Added

• Spring4Shell (CVE-2022-22965) Scan Rule.

Changed

• The Web Cache Deception scan rule now uses a comparison mechanism which should be more performant, and will no longer scan messages which had an error response to start with (Issue 6655).

MacOS WebDrivers version 37

Added

• Add aarch64/arm64 WebDrivers.

Selenium version 15.8.0

Added

• Support aarch64/arm64 WebDrivers.
• Allow to choose the location of Chrome binary (Issue 7166).

OpenAPI Support version 27

Added

• Support content field (JSON) in parameters (Issue 6166).

Changed

• Now depends on commonlib for display of import progress (Issue 6783).
• Dependency updates.

Fixed

• Properly generate Content-Type header when in presence of more than one supported content (Issue 7082).
• Quote provided string values in JSON content (Issue 7128).
• Properly handle empty default values in server variables.