secdec / attack-surface-detector-zap

The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Version mismatch in add-on manifest

thc202 opened this issue · comments

The filename says version 1.1.1 [1] but in the add-on manifest it is 1.1.0. [2]
The version in the manifest takes precedence.

I'd suggest setting that when building, similar to https://github.com/h3xstream/burp-retire-js/pull/22/files
(In this case it could set the version, status, and not-before-version.)

[1] https://github.com/secdec/attack-surface-detector-zap/releases/tag/1.1.1
[2] https://github.com/secdec/attack-surface-detector-zap/blob/1.1.1/zaproxy/src/org/zaproxy/zap/extension/attacksurfacedetector/ZapAddOn.xml#L3

Resolving this issue right away

issue is resolved as of commit 065d504

Thanks for the quick turnaround!