If ZAP fails to detect a known problem then please let us know! Obviously the more information you can give us the better, and the best option would be a simple one page ‘proof of concept’ in the form of a wavsep test - we can then include those in our regression tests.
