From 9b28dd7a7c94fe13fa04a19a9bc274b4fcd97d0b Mon Sep 17 00:00:00 2001 From: Simon Bennetts Date: Tue, 7 May 2024 11:49:57 +0100 Subject: [PATCH] 2.15 Release note update May add more items for last min additions.. Signed-off-by: Simon Bennetts --- .../javahelp/contents/releases/2.15.0.html | 58 ++++++++++++++----- .../contents/ui/dialogs/options/script.html | 4 ++ commonFiles/src/main/resources/map.jhm | 1 + 3 files changed, 48 insertions(+), 15 deletions(-) diff --git a/addOns/help/src/main/javahelp/contents/releases/2.15.0.html b/addOns/help/src/main/javahelp/contents/releases/2.15.0.html index a7d634608..6ec3d007d 100644 --- a/addOns/help/src/main/javahelp/contents/releases/2.15.0.html +++ b/addOns/help/src/main/javahelp/contents/releases/2.15.0.html @@ -19,15 +19,45 @@

Release 2.15.0

Scripts as First Class Scan Rules

-TODO add more details... +Active and passive scan script rules can now be treated as "first class" scan rules. +This means that they can be individually referenced in an active scan policy, in the +passive scan rules options, and in Automation Framework plans. + +In addition directories of scripts can now be added with all of the scripts enabled - +this will make it much more straightfoward to manage script rules in automation.

Menu Items Restructured

-TODO add more details... +The desktop context sensitive menu items have been reordered, and grouped in a more logical way. +This should make it much easier to find the menu item you want, when you want it. + +

Set Logging Levels

+ +A new -loglevel Command Line option allows you to set the log level, +overriding the values specified in the log4j2.properties file in the home directory. +

+New API calls also allow you to set and view the current logging levels: +

Automation Framework GitHub Action

-TODO add more details... +There is a new ZAP GitHub action - the +ZAP Automation Framework Scan. + +The Automation Framework provides a great balance between ease of use and flexibility + functionality. +If you want to perform any non-trivial automation with ZAP then the +Automation Framework is probably your best bet. + +

New Docker Hub Organisation

+ +We have a new DockerHub organisation for the ZAP Docker images: https://hub.docker.com/u/zaproxy + +We are still using the softwaresecurityproject org for 2.15.0 but we will probably not use it for the following releases. + +We do recommend that you switch from `softwaresecurityproject` to zaproxy sooner rather than later.

Dependency Updates

@@ -35,17 +65,15 @@

Dependency Updates

The following libraries were updated: -TODO update... - -

- -The following library was added:

Add-Ons

@@ -76,6 +104,7 @@

Enhancements

  • Issue 8369 : Restructure the desktop menu item order
  • Issue 8393 : Allow to search HTTP messages by Tags
  • Issue 8403 : ZAP not printing script errors to console in cmdline mode with `-script`
    • +
  • Issue 8423 : Add TAGs for yaml, xml, extended json
  • Issue 8452 : Support decode response body through the `Variant`
  • Issue 8454 : Include pluginId in alert events
    • @@ -95,10 +124,9 @@

    Bug fixes

  • Issue 8395 : Add missing API error message
  • Issue 8419 : Prevent raising alerts on temporary messages
  • Issue 8429 : Skip deleted msgs in the messages API endpoints
    • +
  • Issue 8467 : Get resources from add-ons
    • - -

    See Also

    diff --git a/addOns/help/src/main/javahelp/contents/ui/dialogs/options/script.html b/addOns/help/src/main/javahelp/contents/ui/dialogs/options/script.html index b71b2e0b0..ab32e6845 100644 --- a/addOns/help/src/main/javahelp/contents/ui/dialogs/options/script.html +++ b/addOns/help/src/main/javahelp/contents/ui/dialogs/options/script.html @@ -11,6 +11,10 @@

    Options Scripts screen

    This screen allows you to configure the script options:

    + +

    Enable scripts loaded from directories

    +If this option is selected then all of the scripts loaded from the specified directories will be enabled by default. +

    Directories

    A list of directories from which scripts will be loaded. ZAP will read (and write) the scripts using the character encoding UTF-8.

    The scripts must be in subdirectories named after the relevant script type (such as 'active', 'passive', 'proxy' etc) and must have an appropriate extension for the script language used.

    diff --git a/commonFiles/src/main/resources/map.jhm b/commonFiles/src/main/resources/map.jhm index 74f54b613..68c938e53 100644 --- a/commonFiles/src/main/resources/map.jhm +++ b/commonFiles/src/main/resources/map.jhm @@ -116,6 +116,7 @@ +
        Introductionthe introduction to ZAP