OWASP ZAP WAVE - Information Leakage
Examples
Application Stack trace
Server Stack trace
Setting a cookie without the HTTPOnly flag
Not yet implemented