ZAP扫描: Jenkins作业失败(url_not_in_context)

Question

4051 [ZAP-ProxyThread-15] WARN org.zaproxy.zap.extension.api.API  - Bad request to API endpoint [/xml/spider/action/scanAsUser/] from [127.0.0.1]:
The provided url is not in the required context (url_not_in_context) : url
    at org.zaproxy.zap.extension.spider.SpiderAPI.scanURL(SpiderAPI.java:508)
    at org.zaproxy.zap.extension.spider.SpiderAPI.handleApiAction(SpiderAPI.java:283)
    at org.zaproxy.zap.extension.api.API.handleApiRequest(API.java:506)
    at org.parosproxy.paros.core.proxy.ProxyThread.processHttp(ProxyThread.java:499)
    at org.parosproxy.paros.core.proxy.ProxyThread.run(ProxyThread.java:335)
    at java.lang.Thread.run(Thread.java:748)
ERROR: org.zaproxy.clientapi.core.ClientApiException: The provided url is not in the required context

Answer 1

在作业的上下文中有一个名为Include的属性。

位于: Build > Session Properties > Include in Context

如果你的起点是这样的

http://<IP/Host>:port/context1/context2/ 

在攻击模式下。

在上下文中保持包含配置为

http://<IP/Host>:port/.*

以便将该URL视为在/之后发生任何改变有效上下文。