ZAP – ZAP vs Crawlground

Crawlground is a web app designed for testing web crawlers. It hosts a fixed set of test pages, each containing a single control (button, link, form, JavaScript event, etc.). Each test has a hidden marker URL that gets scored only when the control is successfully executed.

The source code is available at https://github.com/zaproxy/crawlground

Section			Score
Crawlground			73%
Individual Tests	Standard	Ajax	Client
Top Level: https://localhost:3456	15	20	22
/score/buttons/01-html-button	❌ FAIL	✓ Pass	✓ Pass
/score/buttons/02-div-onclick	❌ FAIL	❌ FAIL	❌ FAIL
/score/dynamic-content/01-fetch-injected	❌ FAIL	✓ Pass	❌ FAIL
/score/dynamic-content/02-fetch-injected	❌ FAIL	✓ Pass	✓ Pass
/score/dynamic-content/03-intersection-observer	❌ FAIL	❌ FAIL	✓ Pass
/score/dynamic-content/04-details-toggle	❌ FAIL	❌ FAIL	❌ FAIL
/score/dynamic-content/05-sse-injected	❌ FAIL	❌ FAIL	❌ FAIL
/score/dynamic-content/06-websocket-injected	❌ FAIL	✓ Pass	❌ FAIL
/score/dynamic-content/07-load-more	❌ FAIL	✓ Pass	✓ Pass
/score/forms/01-get-form	✓ Pass	✓ Pass	✓ Pass
/score/forms/02-post-form	✓ Pass	❌ FAIL	✓ Pass
/score/forms/03-image-input	✓ Pass	❌ FAIL	✓ Pass
/score/forms/04-select-field	✓ Pass	✓ Pass	✓ Pass
/score/forms/05-fetch-post	❌ FAIL	✓ Pass	✓ Pass
/score/forms/06-radio-buttons	✓ Pass	❌ FAIL	✓ Pass
/score/forms/07-checkboxes	✓ Pass	❌ FAIL	✓ Pass
/score/forms/08-formaction-override	✓ Pass	✓ Pass	✓ Pass
/score/forms/09-js-form-submit	✓ Pass	✓ Pass	✓ Pass
/score/forms/10-multistep-wizard	✓ Pass	❌ FAIL	❌ FAIL
/score/frames/01-iframe-srcdoc	❌ FAIL	❌ FAIL	❌ FAIL
/score/frames/02-shadow-dom	❌ FAIL	❌ FAIL	❌ FAIL
/score/js-events/01-mouseover-injected	❌ FAIL	❌ FAIL	❌ FAIL
/score/js-events/02-onclick-prevent-default	❌ FAIL	✓ Pass	✓ Pass
/score/js-events/03-focus-injected	❌ FAIL	❌ FAIL	❌ FAIL
/score/js-events/04-css-hover-dropdown	✓ Pass	❌ FAIL	✓ Pass
/score/js-events/05-multilevel-dropdown	❌ FAIL	❌ FAIL	❌ FAIL
/score/js-events/06-dialog-modal	✓ Pass	❌ FAIL	✓ Pass
/score/js-events/07-dblclick	❌ FAIL	❌ FAIL	❌ FAIL
/score/js-events/08-keydown-enter	❌ FAIL	❌ FAIL	❌ FAIL
/score/js-events/09-contextmenu	❌ FAIL	❌ FAIL	❌ FAIL
/score/js-events/10-tab-panel	❌ FAIL	✓ Pass	✓ Pass
/score/js-events/11-popover	❌ FAIL	✓ Pass	✓ Pass
/score/links/01-anchor-href	✓ Pass	✓ Pass	✓ Pass
/score/links/02-js-built-href	❌ FAIL	✓ Pass	✓ Pass
/score/links/03-noscript	✓ Pass	❌ FAIL	❌ FAIL
/score/links/04-svg-anchor	✓ Pass	❌ FAIL	❌ FAIL
/score/navigation/01-meta-refresh	✓ Pass	✓ Pass	❌ FAIL
/score/navigation/02-window-location-timeout	❌ FAIL	✓ Pass	❌ FAIL
/score/navigation/03-history-push-state	❌ FAIL	✓ Pass	✓ Pass
/score/navigation/04-hash-routing	❌ FAIL	✓ Pass	✓ Pass
/score/navigation/05-window-replace	❌ FAIL	✓ Pass	❌ FAIL

Configuration

Config	Details
Frequency	Daily
Scripts	https://github.com/zapbot/zap-mgmt-scripts/blob/master/scans/crawlground/
Action	https://github.com/zapbot/zap-mgmt-scripts/actions/workflows/zap-vs-crawlground.yml

Settings

The latest Nightly ZAP Docker image is run with the default settings against this app.

ZAP vs Crawlground

Crawlground

73%

Configuration

Settings