OWASP ZAP WAVE - Session vulnerabilities

Examples

• Password field with autocomplete not disabled
• HTTP Basic authentication is used over an untrusted connection

Not yet implemented