Changelog

All notable changes to this add-on will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

0.19.0 - 2026-02-24

Changed

• Maintenance changes.

Fixed

• Handle persistence errors and forced shutdown in automation job.
• Address memory leak.

0.18.0 - 2025-12-15

Changed

• Update minimum ZAP version to 2.17.0.

Removed

• Dropped help references to ZAP in Ten videos which are no longer available.

0.17.0 - 2025-11-04

Changed

• Update dependency.

Fixed

• Do not warn when canonicalising apparent URI, //, nor empty tel and mailto.

0.16.0 - 2025-09-02

Added

• Support for stopping the spider automation job.

0.15.0 - 2025-06-20

Changed

• Include anti-csrf tokens as part of irrelevant parameters.
• Ignore irrelevant parameters in request bodies (x-www-form-urlencoded) (Related to Issue 7771).
• Skip all URIs with javascript schemes.
• Changed to title caps on the Irrelevant Parameters table “title” in the Options dialog (Issue 2000).

Added

• Add an option to allow users to indicate the Spider should attempt to avoid logout related paths/functionality.

Fixed

• An incorrect column name in the Irrelevant Parameters table used by the Options dialog (Domain should have been Name).

0.14.0 - 2025-03-25

Changed

• Maintenance changes.
• Handle zero max parse size as unlimited.

0.13.0 - 2025-01-10

Changed

• Update minimum ZAP version to 2.16.0.
• Depend on newer version of Common Library add-on (Issue 8016).
• Updated automation framework documentation and templates for spider job to reflect changes to the default value of threadCount parameter
• Fields with default or missing values are omitted for the spider job in saved Automation Framework plans.

Removed

• Remove non-functional option “request wait time” from the API and Automation Framework.

0.12.0 - 2024-09-23

Added

• Allow the parsers to obtain the context and user being used by/in the current spidering scan (Issue 8021 and 7739).

Changed

• Maintenance changes.

0.11.0 - 2024-05-07

Changed

• Update minimum ZAP version to 2.15.0.

Added

• Support for menu weights (Issue 8369)

Fixed

• Fix grammatical error in help content.

0.10.0 - 2024-02-12

Changed

• Skip parsing of empty SVGs.
• Maintenance changes.
• Setting “Query Parameters Handling” via automation framework should now be more forgiving as to the case of the values (enums).

Fixed

• Ensure issues in one parser don’t break the whole parsing process.
• Fix exception that happened with absolute dotted URLs in inlined content.

0.9.0 - 2024-01-26

Added

• Video link in help for Automation Framework job.

Changed

• The sitemap.xml parser will now accept and process a greater range of possible file content (Issue 8299).

0.8.0 - 2023-12-19

Changed

• Handle multiple “Link” HTTP Response headers.
• Maintenance changes.

0.7.0 - 2023-10-12

Changed

• Update minimum ZAP version to 2.14.0.
• Maintenance changes.

0.6.0 - 2023-09-07

Changed

• Maintenance changes.
• Depend on newer versions of Automation Framework and Common Library add-ons (Related to Issue 7961).
• Use Common Library add-on to obtain the Value Generator (Issue 8016).

0.5.0 - 2023-07-11

Changed

• Update minimum ZAP version to 2.13.0.

0.4.0 - 2023-05-03

Fixed

• Set content-length even when body is empty, unless GET request.

0.3.0 - 2023-02-23

Changed

• Maintenance changes.
• Default number of threads to 2 * processor count.

Added

• Support for parsing .DS_Store files to find paths to try (Issue 30).

Fixed

• Spurious error message on setting user in AF job.

0.2.0 - 2023-01-03

Changed

• Maintenance changes.

Fixed

• Prevent exception if no display (Issue 3978).

0.1.0 - 2022-10-27

Functional Improvements Compared to Previous Core Release

The following table illustrates the changes versus the previous core release(s) (2.11/2.11.1).