{"action":"created","issue":{"url":"https://api.github.com/repos/continuumsecurity/bdd-security/issues/12","labels_url":"https://api.github.com/repos/continuumsecurity/bdd-security/issues/12/labels{/name}","comments_url":"https://api.github.com/repos/continuumsecurity/bdd-security/issues/12/comments","events_url":"https://api.github.com/repos/continuumsecurity/bdd-security/issues/12/events","html_url":"https://github.com/continuumsecurity/bdd-security/issues/12","id":57650034,"number":12,"title":"Define site/app scanning","user":{"login":"laminfaty","id":6032339,"avatar_url":"https://avatars.githubusercontent.com/u/6032339?v=3","gravatar_id":"","url":"https://api.github.com/users/laminfaty","html_url":"https://github.com/laminfaty","followers_url":"https://api.github.com/users/laminfaty/followers","following_url":"https://api.github.com/users/laminfaty/following{/other_user}","gists_url":"https://api.github.com/users/laminfaty/gists{/gist_id}","starred_url":"https://api.github.com/users/laminfaty/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/laminfaty/subscriptions","organizations_url":"https://api.github.com/users/laminfaty/orgs","repos_url":"https://api.github.com/users/laminfaty/repos","events_url":"https://api.github.com/users/laminfaty/events{/privacy}","received_events_url":"https://api.github.com/users/laminfaty/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":24,"created_at":"2015-02-13T20:29:46Z","updated_at":"2015-02-23T13:51:38Z","closed_at":null,"body":"Is there a way to tell bdd-security which is using owasp-zap not to scan the whole application/website\r\n\r\nex:  Scan only http://mysite.com/thisapponly instead of http://mysite.com/"},"comment":{"url":"https://api.github.com/repos/continuumsecurity/bdd-security/issues/comments/75543514","html_url":"https://github.com/continuumsecurity/bdd-security/issues/12#issuecomment-75543514","issue_url":"https://api.github.com/repos/continuumsecurity/bdd-security/issues/12","id":75543514,"user":{"login":"continuumsecurity","id":1478907,"avatar_url":"https://avatars.githubusercontent.com/u/1478907?v=3","gravatar_id":"","url":"https://api.github.com/users/continuumsecurity","html_url":"https://github.com/continuumsecurity","followers_url":"https://api.github.com/users/continuumsecurity/followers","following_url":"https://api.github.com/users/continuumsecurity/following{/other_user}","gists_url":"https://api.github.com/users/continuumsecurity/gists{/gist_id}","starred_url":"https://api.github.com/users/continuumsecurity/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/continuumsecurity/subscriptions","organizations_url":"https://api.github.com/users/continuumsecurity/orgs","repos_url":"https://api.github.com/users/continuumsecurity/repos","events_url":"https://api.github.com/users/continuumsecurity/events{/privacy}","received_events_url":"https://api.github.com/users/continuumsecurity/received_events","type":"User","site_admin":false},"created_at":"2015-02-23T13:51:38Z","updated_at":"2015-02-23T13:51:38Z","body":"Yes pipe and asterisk.  I don't see why zap is filtering everything.  Could you try doing the exact same thing but without the BDD-Sec framework.  I.e.\r\n1. configure browser to use zap\r\n2. browse to target site and navigate around\r\n3. browse to http://zap  \r\n  - this will take you to the API\r\n  - navigate to the ascan  exclude urls option\r\n  - add your regex\r\n4. go back to ZAP and choose to scan the site.\r\n"}}