ZAP – ZAP vs Crawlground

Crawlground is a web app designed for testing web crawlers. It hosts a fixed set of test pages, each containing a single control (button, link, form, JavaScript event, etc.). Each test has a hidden marker URL that gets scored only when the control is successfully executed.

The source code is available at https://github.com/zaproxy/crawlground

Section			Score
Crawlground			78%
Individual Tests	Standard	Ajax	Client
Top Level: https://localhost:3456	21	31	46
/score/buttons/01-html-button	❌ FAIL	✓ Pass	✓ Pass
/score/buttons/02-div-onclick	❌ FAIL	❌ FAIL	✓ Pass
/score/dynamic-content/01-fetch-injected	❌ FAIL	✓ Pass	✓ Pass
/score/dynamic-content/02-fetch-injected	❌ FAIL	✓ Pass	✓ Pass
/score/dynamic-content/03-intersection-observer	❌ FAIL	❌ FAIL	❌ FAIL
/score/dynamic-content/04-details-toggle	❌ FAIL	❌ FAIL	❌ FAIL
/score/dynamic-content/05-sse-injected	❌ FAIL	✓ Pass	✓ Pass
/score/dynamic-content/06-websocket-injected	❌ FAIL	✓ Pass	✓ Pass
/score/dynamic-content/07-load-more	❌ FAIL	✓ Pass	✓ Pass
/score/dynamic-content/08-template-element	✓ Pass	✓ Pass	✓ Pass
/score/dynamic-content/09-infinite-scroll	❌ FAIL	❌ FAIL	❌ FAIL
/score/dynamic-content/10-localstorage	❌ FAIL	✓ Pass	✓ Pass
/score/forms/01-get-form	✓ Pass	✓ Pass	✓ Pass
/score/forms/02-post-form	✓ Pass	❌ FAIL	✓ Pass
/score/forms/03-image-input	✓ Pass	❌ FAIL	✓ Pass
/score/forms/04-select-field	✓ Pass	✓ Pass	✓ Pass
/score/forms/05-fetch-post	❌ FAIL	✓ Pass	✓ Pass
/score/forms/06-radio-buttons	✓ Pass	❌ FAIL	✓ Pass
/score/forms/07-checkboxes	✓ Pass	❌ FAIL	✓ Pass
/score/forms/08-formaction-override	✓ Pass	✓ Pass	✓ Pass
/score/forms/09-js-form-submit	✓ Pass	✓ Pass	✓ Pass
/score/forms/10-multistep-wizard	✓ Pass	❌ FAIL	✓ Pass
/score/forms/11-fetch-get	❌ FAIL	❌ FAIL	✓ Pass
/score/forms/12-xhr-post	❌ FAIL	✓ Pass	✓ Pass
/score/frames/01-iframe-srcdoc	❌ FAIL	❌ FAIL	❌ FAIL
/score/frames/02-shadow-dom	❌ FAIL	❌ FAIL	❌ FAIL
/score/frames/03-iframe-src	✓ Pass	❌ FAIL	✓ Pass
/score/frames/04-shadow-dom-closed	❌ FAIL	❌ FAIL	❌ FAIL
/score/js-events/01-mouseover-injected	❌ FAIL	❌ FAIL	❌ FAIL
/score/js-events/02-onclick-prevent-default	❌ FAIL	✓ Pass	✓ Pass
/score/js-events/03-focus-injected	❌ FAIL	❌ FAIL	❌ FAIL
/score/js-events/04-css-hover-dropdown	✓ Pass	❌ FAIL	✓ Pass
/score/js-events/05-multilevel-dropdown	❌ FAIL	❌ FAIL	✓ Pass
/score/js-events/06-dialog-modal	✓ Pass	❌ FAIL	✓ Pass
/score/js-events/07-dblclick	❌ FAIL	❌ FAIL	❌ FAIL
/score/js-events/08-keydown-enter	❌ FAIL	❌ FAIL	❌ FAIL
/score/js-events/09-contextmenu	❌ FAIL	❌ FAIL	❌ FAIL
/score/js-events/10-tab-panel	❌ FAIL	✓ Pass	✓ Pass
/score/js-events/11-popover	❌ FAIL	✓ Pass	✓ Pass
/score/js-events/12-pointer-events	❌ FAIL	❌ FAIL	✓ Pass
/score/js-events/13-long-press	❌ FAIL	❌ FAIL	❌ FAIL
/score/js-events/14-custom-event	❌ FAIL	✓ Pass	✓ Pass
/score/links/01-anchor-href	✓ Pass	✓ Pass	✓ Pass
/score/links/02-js-built-href	❌ FAIL	✓ Pass	✓ Pass
/score/links/03-noscript	✓ Pass	❌ FAIL	✓ Pass
/score/links/04-svg-anchor	✓ Pass	❌ FAIL	✓ Pass
/score/links/05-target-blank	✓ Pass	✓ Pass	✓ Pass
/score/links/06-javascript-href	❌ FAIL	✓ Pass	✓ Pass
/score/links/07-image-map	✓ Pass	❌ FAIL	✓ Pass
/score/navigation/01-meta-refresh	✓ Pass	✓ Pass	✓ Pass
/score/navigation/02-window-location-timeout	❌ FAIL	✓ Pass	✓ Pass
/score/navigation/03-history-push-state	❌ FAIL	✓ Pass	✓ Pass
/score/navigation/04-hash-routing	❌ FAIL	✓ Pass	✓ Pass
/score/navigation/05-window-replace	❌ FAIL	✓ Pass	✓ Pass
/score/navigation/06-http-redirect	✓ Pass	✓ Pass	✓ Pass
/score/navigation/07-base-href	✓ Pass	✓ Pass	✓ Pass
/score/navigation/08-window-open	❌ FAIL	✓ Pass	✓ Pass
/score/navigation/09-history-replace-state	❌ FAIL	✓ Pass	✓ Pass
/score/other/01-bot-detection-globals	❌ FAIL	❌ FAIL	❌ FAIL

Configuration

Config	Details
Frequency	Daily
Scripts	https://github.com/zapbot/zap-mgmt-scripts/blob/master/scans/crawlground/
Action	https://github.com/zapbot/zap-mgmt-scripts/actions/workflows/zap-vs-crawlground.yml

Settings

The latest Nightly ZAP Docker image is run with the default settings against this app.

ZAP vs Crawlground

Crawlground

78%

Configuration

Settings