ZAP vs Crawlground

Crawlground is a web app designed for testing web crawlers. It hosts a fixed set of test pages, each containing a single control (button, link, form, JavaScript event, etc.). Each test has a hidden marker URL that gets scored only when the control is successfully executed.

The source code is available at https://github.com/zaproxy/crawlground

Section Score
Crawlground
76%
Individual Tests Standard Ajax Client
Top Level: https://localhost:3456 21 29 45
/score/buttons/01-html-button ❌ Fail ✓ Pass ✓ Pass
/score/buttons/02-div-onclick ❌ Fail ❌ Fail ✓ Pass
/score/dynamic-content/01-fetch-injected ❌ Fail ✓ Pass ✓ Pass
/score/dynamic-content/02-fetch-injected ❌ Fail ✓ Pass ✓ Pass
/score/dynamic-content/03-intersection-observer ❌ Fail ❌ Fail ❌ Fail
/score/dynamic-content/04-details-toggle ❌ Fail ❌ Fail ❌ Fail
/score/dynamic-content/05-sse-injected ❌ Fail ✓ Pass ✓ Pass
/score/dynamic-content/06-websocket-injected ❌ Fail ✓ Pass ✓ Pass
/score/dynamic-content/07-load-more ❌ Fail ✓ Pass ✓ Pass
/score/dynamic-content/08-template-element ✓ Pass ✓ Pass ✓ Pass
/score/dynamic-content/09-infinite-scroll ❌ Fail ❌ Fail ❌ Fail
/score/dynamic-content/10-localstorage ❌ Fail ✓ Pass ✓ Pass
/score/forms/01-get-form ✓ Pass ✓ Pass ✓ Pass
/score/forms/02-post-form ✓ Pass ❌ Fail ✓ Pass
/score/forms/03-image-input ✓ Pass ❌ Fail ✓ Pass
/score/forms/04-select-field ✓ Pass ✓ Pass ✓ Pass
/score/forms/05-fetch-post ❌ Fail ✓ Pass ✓ Pass
/score/forms/06-radio-buttons ✓ Pass ❌ Fail ✓ Pass
/score/forms/07-checkboxes ✓ Pass ❌ Fail ✓ Pass
/score/forms/08-formaction-override ✓ Pass ✓ Pass ✓ Pass
/score/forms/09-js-form-submit ✓ Pass ✓ Pass ✓ Pass
/score/forms/10-multistep-wizard ✓ Pass ❌ Fail ✓ Pass
/score/forms/11-fetch-get ❌ Fail 86% ✓ Pass
/score/forms/12-xhr-post ❌ Fail ✓ Pass ✓ Pass
/score/frames/01-iframe-srcdoc ❌ Fail ❌ Fail ❌ Fail
/score/frames/02-shadow-dom ❌ Fail ❌ Fail ❌ Fail
/score/frames/03-iframe-src ✓ Pass ❌ Fail ✓ Pass
/score/frames/04-shadow-dom-closed ❌ Fail ❌ Fail ❌ Fail
/score/js-events/01-mouseover-injected ❌ Fail ❌ Fail ❌ Fail
/score/js-events/02-onclick-prevent-default ❌ Fail ✓ Pass ✓ Pass
/score/js-events/03-focus-injected ❌ Fail ❌ Fail ❌ Fail
/score/js-events/04-css-hover-dropdown ✓ Pass ❌ Fail ✓ Pass
/score/js-events/05-multilevel-dropdown ❌ Fail ❌ Fail 86%
/score/js-events/06-dialog-modal ✓ Pass ❌ Fail ✓ Pass
/score/js-events/07-dblclick ❌ Fail ❌ Fail ❌ Fail
/score/js-events/08-keydown-enter ❌ Fail ❌ Fail ❌ Fail
/score/js-events/09-contextmenu ❌ Fail ❌ Fail ❌ Fail
/score/js-events/10-tab-panel ❌ Fail ✓ Pass ✓ Pass
/score/js-events/11-popover ❌ Fail ✓ Pass ✓ Pass
/score/js-events/12-pointer-events ❌ Fail ❌ Fail ✓ Pass
/score/js-events/13-long-press ❌ Fail ❌ Fail ❌ Fail
/score/js-events/14-custom-event ❌ Fail ✓ Pass ✓ Pass
/score/links/01-anchor-href ✓ Pass ✓ Pass ✓ Pass
/score/links/02-js-built-href ❌ Fail ✓ Pass ✓ Pass
/score/links/03-noscript ✓ Pass ❌ Fail ✓ Pass
/score/links/04-svg-anchor ✓ Pass ❌ Fail ✓ Pass
/score/links/05-target-blank ✓ Pass ✓ Pass ✓ Pass
/score/links/06-javascript-href ❌ Fail ✓ Pass ✓ Pass
/score/links/07-image-map ✓ Pass ❌ Fail ✓ Pass
/score/navigation/01-meta-refresh ✓ Pass ✓ Pass ✓ Pass
/score/navigation/02-window-location-timeout ❌ Fail ✓ Pass ✓ Pass
/score/navigation/03-history-push-state ❌ Fail ✓ Pass ✓ Pass
/score/navigation/04-hash-routing ❌ Fail ✓ Pass ✓ Pass
/score/navigation/05-window-replace ❌ Fail ✓ Pass ✓ Pass
/score/navigation/06-http-redirect ✓ Pass ✓ Pass ✓ Pass
/score/navigation/07-base-href ✓ Pass ✓ Pass ✓ Pass
/score/navigation/08-window-open ❌ Fail 71% ✓ Pass
/score/navigation/09-history-replace-state ❌ Fail 57% ✓ Pass
/score/other/01-bot-detection-globals ❌ Fail ❌ Fail ❌ Fail

 

Configuration

Config Details
Frequency Daily
Scripts https://github.com/zapbot/zap-mgmt-scripts/blob/master/scans/crawlground/
Action https://github.com/zapbot/zap-mgmt-scripts/actions/workflows/zap-vs-crawlground.yml

 

Settings

The latest Nightly ZAP Docker image is run with the default settings against this app.