Add an "Enable all scripts" option to Options->Scripts screen

[vx-sec]

Is your feature request related to a problem? Please describe.

Currently all scripts imported from a specified directory are disabled by default, which can be an issue when working with containerized ZAP by preventing the usage of the scripts imported during the scan.

Describe the solution you'd like

Add an option/checkbox to enable/disable scripts imported from the specified directories.

Describe alternatives you've considered

The alternative now is to manually enable all scripts one by one either programmatically or manually through the UI.

Screenshots

No response

Additional context

No response

Would you like to help fix this issue?

• Yes

[psiinon]

Thanks @vx-sec - I've assigned this issue to you 😁
Just ask here if you have any questions!

[vx-sec]

So I've been trying to understand how ZAP's workflow goes and found that the core of interacting with scripts is in org/zaproxy/zap/extension/script/ExtensionScript.java.

So I've added a boolean field to it, as well as modifier for that field. Then in addScriptsFromDir() the value for that field is checked and the loaded scripts are enabled accordingly. I'd like to ask someone from the team to review the changes so far and say if it is at all following the ZAP's workflow or not.

I figure the next thing would be to add the appropriate checkbox in org/zaproxy/zap/extension/script/OptionsScriptPanel.java and call the modifier in ExtensionScript.java on saveParam() according to it. But I'm very inexperienced in java GUIs so any help would be great.

[vx-sec]

@psiinon Any feedback on this?

[thc202]

The flag/option should be added to ScriptParam not the extension itself. This should only apply to the dirs added through the options too.

[psiinon]

Thanks @thc202
Sorry @vx-sec - I've been doing a lot of traveling recently and am still catching up...