Tool Alerts

The Alert tools are unusual in that there are multiple related tools. This is to allow you to be able to choose to show whichever level of alerts you are interested in.

The commonAlerts.js tools underlies all of the other alert tools and is hidden from view.

This tool:

1. Registers for ZAP events generated by AlertEventPublisher.java - this raises events whenever alerts are added or changed
2. Listens these events and then:
3. Filters out any not on the target domain
4. Adds new alerts to a sharedData.alerts data structure
5. Raises a new event with an event name based on the risk of the alert and including a count of the number of alerts with that risk type (ie the counts shown by the other site alert tools)

The sharedData.alerts object is structured:

• target domain
  • risk
    • alert name
      • url = { event details }

The site based alert tools:

• siteAlertsHigh.js
• siteAlertsMedium.js
• siteAlertsLow.js
• siteAlertsInformational.js

all listen for 'commonAlerts.risk' events raised by commonAlerts.js and then just update the count they display with the one in the event.

The page based alert tools:

• pageAlertsHigh.js
• pageAlertsMedium.js
• pageAlertsLow.js
• pageAlertsInformational.js

all listen for 'commonAlerts.risk' events raised by commonAlerts.js but then they need to count the number of the relevant alerts that apply to the current URL by accessing the sharedData.alerts object directly.