nl_tokens: Passively scans an HTTP message . The scan function will be called for request / response made via ZAP actual messages depend on the function appliesToHistoryType defined below .
pl_tokens: function scan ( ps , msg , src ) { // Test the request and/or response here if ( true ) { // Change to a test which detects the vulnerability // raiseAlert(risk, int confidence, String name, String description, String uri,  //		String param, String attack, String otherInfo, String solution, String evidence,  //		int cweId, int wascId, HttpMessage msg) // risk: 0: info, 1: low, 2: medium, 3: high // confidence: 0: falsePositive, 1: low, 2: medium, 3: high, 4: confirmed <mask> . raiseAlert ( 1 , 1 , 'Passive Vulnerability title' , 'Full description' , msg . getRequestHeader ( ) . getURI ( ) . toString ( ) , 'The param' , 'Your attack' , 'Any other info' , 'The solution' , '' , 'References' , 0 , 0 , msg ) ; //addTag(String tag) ps . addTag ( 'tag' ) } // Raise less reliable alert (that is, prone to false positives) when in LOW alert threshold // Expected values: "LOW", "MEDIUM", "HIGH" if ( ps . getAlertThreshold ( ) == "LOW" ) { // ... } }