Reduce usage of error level logging in ascan rules

kingthorin · kingthorin · commit 5d62a9862aa4 · 2025-10-24T11:28:13.000-04:00
- Add change note.
- Update logging in scan rules.

Signed-off-by: kingthorin &lt;kingthorin@users.noreply.github.com&gt;
diff --git a/addOns/ascanrules/CHANGELOG.md b/addOns/ascanrules/CHANGELOG.md
@@ -10,6 +10,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ### Changed
 - Address potential false positives with the XSLT Injection scan rule when payloads cause a failure which may still contain the expected evidence.
 - Depends on an updated version of the Common Library add-on.
+- Reduced usage of error level logging.
 
 ## [74] - 2025-09-18
 ### Added
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/BufferOverflowScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/BufferOverflowScanRule.java
@@ -156,7 +156,7 @@ public void scan(HttpMessage msg, String param, String value) {
         } catch (URIException e) {
             LOGGER.debug("Failed to send HTTP message, cause: {}", e.getMessage());
         } catch (IOException e) {
-            LOGGER.error(e.getMessage(), e);
+            LOGGER.debug(e.getMessage(), e);
         }
     }
 
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/CrossSiteScriptingScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/CrossSiteScriptingScanRule.java
@@ -21,6 +21,7 @@
 
 import static org.zaproxy.zap.extension.ascanrules.utils.Constants.NULL_BYTE_CHARACTER;
 
+import java.io.IOException;
 import java.net.UnknownHostException;
 import java.util.Arrays;
 import java.util.Collections;
@@ -258,8 +259,8 @@ private List<HtmlContext> performAttack(
             // Not an error, just means we probably attacked the redirect
             // location
             return null;
-        } catch (Exception e) {
-            LOGGER.error(e.getMessage(), e);
+        } catch (IOException e) {
+            LOGGER.debug(e.getMessage(), e);
         }
 
         if (isStop()) {
@@ -996,8 +997,8 @@ public void scan(HttpMessage msg, String param, String value) {
                 attackHeader(msg, param, appendedValue ? value : "");
             }
 
-        } catch (Exception e) {
-            LOGGER.error(e.getMessage(), e);
+        } catch (IOException e) {
+            LOGGER.debug(e.getMessage(), e);
         }
     }
 
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/FormatStringScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/FormatStringScanRule.java
@@ -272,7 +272,7 @@ && isPage200(verificationMsg)) {
         } catch (URIException e) {
             LOGGER.debug("Failed to send HTTP message, cause: {}", e.getMessage());
         } catch (IOException e) {
-            LOGGER.error(e.getMessage(), e);
+            LOGGER.debug(e.getMessage(), e);
         }
     }
 
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/HeartBleedActiveScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/HeartBleedActiveScanRule.java
@@ -1042,9 +1042,9 @@ public void scan() {
                     if (os != null) os.close();
                 }
             }
-        } catch (Exception e) {
+        } catch (IOException e) {
             // needed to catch exceptions from the "finally" statement
-            LOGGER.error("Error scanning a node for HeartBleed: {}", e.getMessage(), e);
+            LOGGER.debug("Error scanning a node for HeartBleed: {}", e.getMessage(), e);
         }
     }
 
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/HiddenFilesScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/HiddenFilesScanRule.java
@@ -409,13 +409,13 @@ private static List<String> getOptionalList(JSONObject jsonObj, String key) {
     private String readPayloadsFile(String path) {
         File f = new File(path);
         if (!f.exists()) {
-            LOGGER.error("No such file: {}", f.getAbsolutePath());
+            LOGGER.warn("No such file: {}", f.getAbsolutePath());
             return "";
         }
         try {
             return new String(Files.readAllBytes(f.toPath()), StandardCharsets.UTF_8);
         } catch (IOException e) {
-            LOGGER.error(
+            LOGGER.warn(
                     "Error on opening/reading {} payload file. Error: {}",
                     getName(),
                     e.getMessage(),
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/Log4ShellScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/Log4ShellScanRule.java
@@ -156,7 +156,7 @@ public void scan(HttpMessage msg, String param, String value) {
             scanWithPayloads(param, ATTACK_PATTERNS_CVE44228, PREFIX_CVE44228);
             scanWithPayloads(param, ATTACK_PATTERNS_CVE45046, PREFIX_CVE45046);
         } catch (Exception e) {
-            LOGGER.error(e.getMessage(), e);
+            LOGGER.warn(e.getMessage(), e);
         }
     }
 
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/PersistentXssPrimeScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/PersistentXssPrimeScanRule.java
@@ -19,6 +19,7 @@
  */
 package org.zaproxy.zap.extension.ascanrules;
 
+import java.io.IOException;
 import java.util.Collections;
 import java.util.HashMap;
 import java.util.Map;
@@ -95,8 +96,8 @@ public void scan(HttpMessage msg, String param, String value) {
             this.setParameter(msg1, param, SourceSinkUtils.getUniqueValue(msg1, param));
             LOGGER.debug("Prime msg={} param={}", msg1.getRequestHeader().getURI(), param);
             sendAndReceive(msg1, false);
-        } catch (Exception e) {
-            LOGGER.error(e.getMessage(), e);
+        } catch (IOException e) {
+            LOGGER.debug(e.getMessage(), e);
         }
     }
 
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/PersistentXssScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/PersistentXssScanRule.java
@@ -19,6 +19,7 @@
  */
 package org.zaproxy.zap.extension.ascanrules;
 
+import java.io.IOException;
 import java.util.Arrays;
 import java.util.Collections;
 import java.util.HashMap;
@@ -146,8 +147,8 @@ private List<HtmlContext> performAttack(
         setParameter(sourceMsg2, param, attack);
         try {
             sendAndReceive(sourceMsg2);
-        } catch (Exception e) {
-            LOGGER.error(e.getMessage(), e);
+        } catch (IOException e) {
+            LOGGER.debug(e.getMessage(), e);
         }
 
         if (isStop()) {
@@ -157,8 +158,8 @@ private List<HtmlContext> performAttack(
         HttpMessage sinkMsg2 = sinkMsg.cloneRequest();
         try {
             sendAndReceive(sinkMsg2);
-        } catch (Exception e) {
-            LOGGER.error(e.getMessage(), e);
+        } catch (IOException e) {
+            LOGGER.debug(e.getMessage(), e);
         }
 
         if (isStop()) {
@@ -690,8 +691,8 @@ public void scan(HttpMessage sourceMsg, String param, String value) {
                     }
                 }
             }
-        } catch (Exception e) {
-            LOGGER.error(e.getMessage(), e);
+        } catch (IOException e) {
+            LOGGER.debug(e.getMessage(), e);
         }
     }
 
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/PersistentXssSpiderScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/PersistentXssSpiderScanRule.java
@@ -19,6 +19,7 @@
  */
 package org.zaproxy.zap.extension.ascanrules;
 
+import java.io.IOException;
 import java.util.Collections;
 import java.util.HashMap;
 import java.util.Map;
@@ -102,8 +103,8 @@ public void scan() {
             sendAndReceive(msg1, false);
             SourceSinkUtils.testForSink(msg1);
 
-        } catch (Exception e) {
-            LOGGER.error(e.getMessage(), e);
+        } catch (IOException e) {
+            LOGGER.debug(e.getMessage(), e);
         }
     }
 
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/RemoteCodeExecutionCve20121823ScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/RemoteCodeExecutionCve20121823ScanRule.java
@@ -19,6 +19,7 @@
  */
 package org.zaproxy.zap.extension.ascanrules;
 
+import java.io.IOException;
 import java.util.Collections;
 import java.util.HashMap;
 import java.util.List;
@@ -178,8 +179,8 @@ private boolean scan(URI originalURI, URI attackURI, String payload) {
                 buildAlert(payload, responseBody).setMessage(attackmsg).raise();
                 return true;
             }
-        } catch (Exception e) {
-            LOGGER.error(
+        } catch (IOException e) {
+            LOGGER.debug(
                     "Error scanning a URL for Remote Code Execution via CVE-2012-1823: {}",
                     e.getMessage(),
                     e);
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/SourceCodeDisclosureCve20121823ScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/SourceCodeDisclosureCve20121823ScanRule.java
@@ -19,6 +19,7 @@
  */
 package org.zaproxy.zap.extension.ascanrules;
 
+import java.io.IOException;
 import java.util.Collections;
 import java.util.HashMap;
 import java.util.List;
@@ -184,8 +185,8 @@ public void scan() {
                     buildAlert(sourceCode).setMessage(attackmsg).raise();
                 }
             }
-        } catch (Exception e) {
-            LOGGER.error(
+        } catch (IOException e) {
+            LOGGER.debug(
                     "Error scanning a Host for Source Code Disclosure via CVE-2012-1823: {}",
                     e.getMessage(),
                     e);
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/SourceCodeDisclosureWebInfScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/SourceCodeDisclosureWebInfScanRule.java
@@ -24,6 +24,7 @@
 import com.strobel.decompiler.PlainTextOutput;
 import java.io.File;
 import java.io.FileOutputStream;
+import java.io.IOException;
 import java.io.OutputStream;
 import java.util.Arrays;
 import java.util.Collections;
@@ -267,8 +268,8 @@ public void scan() {
                 javaClassesFound.remove(classname);
                 javaClassesHandled.add(classname);
             }
-        } catch (Exception e) {
-            LOGGER.error(
+        } catch (IOException e) {
+            LOGGER.debug(
                     "Error scanning a Host for Source Code Disclosure via the WEB-INF folder: {}",
                     e.getMessage(),
                     e);
diff --git a/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/SstiBlindScanRule.java b/addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/SstiBlindScanRule.java
@@ -382,13 +382,11 @@ private void sendPayloadsToMakeCallBack(String paramName, String[] commandExecPa
                             ex.getMessage(),
                             msg.getRequestHeader().getURI());
                 } catch (IOException ex) {
-                    LOGGER.warn(
+                    LOGGER.debug(
                             "SSTI vulnerability check failed for parameter [{}] and payload [{}] due to an I/O error",
                             paramName,
                             payload,
                             ex);
-                } catch (Exception ex) {
-                    LOGGER.error("Failed SSTI rule with payload [{}]", payload, ex);
                 }
             }
         }
diff --git a/addOns/ascanrulesAlpha/CHANGELOG.md b/addOns/ascanrulesAlpha/CHANGELOG.md
@@ -10,6 +10,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ### Changed
 - The Web Cache Deception scan rule now includes example alert functionality for documentation generation purposes (Issue 6119).
 - Depends on an updated version of the Common Library add-on.
+- Reduced usage of error level logging.
 
 ## [52] - 2025-10-07
 ### Added
diff --git a/addOns/ascanrulesAlpha/src/main/java/org/zaproxy/zap/extension/ascanrulesAlpha/LdapInjectionScanRule.java b/addOns/ascanrulesAlpha/src/main/java/org/zaproxy/zap/extension/ascanrulesAlpha/LdapInjectionScanRule.java
@@ -19,6 +19,7 @@
  */
 package org.zaproxy.zap.extension.ascanrulesAlpha;
 
+import java.io.IOException;
 import java.net.UnknownHostException;
 import java.text.MessageFormat;
 import java.util.Collections;
@@ -547,10 +548,10 @@ public void scan(HttpMessage originalmsg, String paramname, String paramvalue) {
 
         } catch (UnknownHostException | URIException e) {
             LOGGER.debug("Failed to send HTTP message, cause: {}", e.getMessage());
-        } catch (Exception e) {
+        } catch (IOException e) {
             // Do not try to internationalise this.. we need an error message in any event..
             // if it's in English, it's still better than not having it at all.
-            LOGGER.error("An error occurred checking a url for LDAP Injection issues", e);
+            LOGGER.debug("An error occurred checking a url for LDAP Injection issues", e);
         }
     }
 
@@ -590,11 +591,9 @@ protected boolean responseMatches(HttpMessage msg, Pattern pattern) {
      * @param placeboMessage the message used to send the placebo attack
      * @param parameterName the name of the parameter which was attacked
      * @return
-     * @throws Exception
      */
     private boolean checkResultsForLDAPAlert(
-            HttpMessage attackMessage, HttpMessage placeboMessage, String parameterName)
-            throws Exception {
+            HttpMessage attackMessage, HttpMessage placeboMessage, String parameterName) {
         // compare the request response with each of the known error messages,
         // for each of the known LDAP implementations.
         // in order to minimise false positives, only consider a match
diff --git a/addOns/ascanrulesBeta/CHANGELOG.md b/addOns/ascanrulesBeta/CHANGELOG.md
@@ -9,6 +9,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ### Changed
 - Depends on an updated version of the Common Library add-on.
+- Reduced usage of error level logging.
 
 ## [62] - 2025-09-18
 ### Added
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/BackupFileDisclosureScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/BackupFileDisclosureScanRule.java
@@ -19,6 +19,7 @@
  */
 package org.zaproxy.zap.extension.ascanrulesBeta;
 
+import java.io.IOException;
 import java.net.MalformedURLException;
 import java.util.Arrays;
 import java.util.Collections;
@@ -392,8 +393,8 @@ public void scan() {
                 LOGGER.debug(
                         "The URI has no filename component, so there is not much point in looking for a corresponding backup file!");
             }
-        } catch (Exception e) {
-            LOGGER.error(
+        } catch (IOException e) {
+            LOGGER.debug(
                     "Error scanning a request for Backup File Disclosure: {}", e.getMessage(), e);
         }
     }
@@ -441,7 +442,7 @@ private static boolean isEmptyResponse(byte[] response) {
         return response.length == 0;
     }
 
-    private void findBackupFile(HttpMessage originalMessage) throws Exception {
+    private void findBackupFile(HttpMessage originalMessage) throws IOException {
 
         try {
             boolean gives404s = true;
@@ -796,8 +797,8 @@ private void findBackupFile(HttpMessage originalMessage) throws Exception {
                 }
             }
 
-        } catch (Exception e) {
-            LOGGER.error(
+        } catch (IOException e) {
+            LOGGER.debug(
                     "Some error occurred when looking for a backup file for '{}'",
                     originalMessage.getRequestHeader().getURI(),
                     e);
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/CrossDomainScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/CrossDomainScanRule.java
@@ -154,9 +154,9 @@ public void scan() {
 
             scanSilverlightCrossdomainPolicyFile(originalURI);
 
-        } catch (Exception e) {
+        } catch (IOException | XPathExpressionException e) {
             // needed to catch exceptions from the "finally" statement
-            LOGGER.error(
+            LOGGER.debug(
                     "Error scanning a node for Cross Domain misconfigurations: {}",
                     e.getMessage(),
                     e);
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/ExpressionLanguageInjectionScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/ExpressionLanguageInjectionScanRule.java
@@ -190,7 +190,7 @@ public void scan(HttpMessage msg, String paramName, String value) {
         } catch (IOException ex) {
             // Do not try to internationalise this.. we need an error message in any event..
             // if it's in English, it's still better than not having it at all.
-            LOGGER.error(
+            LOGGER.debug(
                     "Expression Language Injection vulnerability check failed for parameter [{}] and payload [{}] due to an I/O error",
                     paramName,
                     payload,
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/GitMetadata.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/GitMetadata.java
@@ -21,6 +21,7 @@
 
 import java.io.ByteArrayOutputStream;
 import java.io.FileNotFoundException;
+import java.io.IOException;
 import java.nio.ByteBuffer;
 import java.util.Arrays;
 import java.util.Map;
@@ -320,7 +321,7 @@ public byte[] getObjectData(
             try {
                 packinfofiledata = getURIResponseBody(uri, false, basemsg);
             } catch (FileNotFoundException e) {
-                LOGGER.error(
+                LOGGER.warn(
                         "We could not read '{}' to get the name of the pack file containing the content: {}",
                         uri,
                         e.getMessage());
@@ -1005,8 +1006,8 @@ private byte[] getPackedObjectData(
                                 + inflatedObjectData.length);
 
             return inflatedObjectData;
-        } catch (Exception e) {
-            LOGGER.error("Some error occurred extracting a packed object", e);
+        } catch (IOException e) {
+            LOGGER.debug("Some error occurred extracting a packed object", e);
             throw e;
         }
     }
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/HttpOnlySiteScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/HttpOnlySiteScanRule.java
@@ -168,7 +168,7 @@ public void scan() {
                     .getRequestHeader()
                     .setURI(new URI("https", null, host, getPort(newRequest), path));
         } catch (URIException e) {
-            LOGGER.error("Error creating HTTPS URL from HTTP URL:", e);
+            LOGGER.debug("Error creating HTTPS URL from HTTP URL:", e);
             return;
         }
 
@@ -226,7 +226,7 @@ public void scan() {
             }
             return;
         } catch (IOException e) {
-            LOGGER.error("Request couldn't go through:", e);
+            LOGGER.debug("Request couldn't go through:", e);
             return;
         }
     }
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/HttpParameterPollutionScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/HttpParameterPollutionScanRule.java
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/HttpsAsHttpScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/HttpsAsHttpScanRule.java
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/InsecureHttpMethodScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/InsecureHttpMethodScanRule.java
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/ProxyDisclosureScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/ProxyDisclosureScanRule.java
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/RelativePathConfusionScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/RelativePathConfusionScanRule.java
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/SessionFixationScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/SessionFixationScanRule.java
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/ShellShockScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/ShellShockScanRule.java
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/SourceCodeDisclosureFileInclusionScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/SourceCodeDisclosureFileInclusionScanRule.java
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/SourceCodeDisclosureSvnScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/SourceCodeDisclosureSvnScanRule.java
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/Text4ShellScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/Text4ShellScanRule.java
diff --git a/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/UsernameEnumerationScanRule.java b/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/UsernameEnumerationScanRule.java

Original file line number	Diff line number	Diff line change
`@@ -156,7 +156,7 @@ public void scan(HttpMessage msg, String param, String value) {`
`156`	`156`	`} catch (URIException e) {`
`157`	`157`	`LOGGER.debug("Failed to send HTTP message, cause: {}", e.getMessage());`
`158`	`158`	`} catch (IOException e) {`
`159`		`- LOGGER.error(e.getMessage(), e);`
	`159`	`+ LOGGER.debug(e.getMessage(), e);`
`160`	`160`	`}`
`161`	`161`	`}`
`162`	`162`
Original file line number	Diff line number	Diff line change
`@@ -21,6 +21,7 @@`
`21`	`21`
`22`	`22`	`import static org.zaproxy.zap.extension.ascanrules.utils.Constants.NULL_BYTE_CHARACTER;`
`23`	`23`
	`24`	`+import java.io.IOException;`
`24`	`25`	`import java.net.UnknownHostException;`
`25`	`26`	`import java.util.Arrays;`
`26`	`27`	`import java.util.Collections;`
`@@ -258,8 +259,8 @@ private List<HtmlContext> performAttack(`
`258`	`259`	`// Not an error, just means we probably attacked the redirect`
`259`	`260`	`// location`
`260`	`261`	`return null;`
`261`		`- } catch (Exception e) {`
`262`		`- LOGGER.error(e.getMessage(), e);`
	`262`	`+ } catch (IOException e) {`
	`263`	`+ LOGGER.debug(e.getMessage(), e);`
`263`	`264`	`}`
`264`	`265`
`265`	`266`	`if (isStop()) {`
`@@ -996,8 +997,8 @@ public void scan(HttpMessage msg, String param, String value) {`
`996`	`997`	`attackHeader(msg, param, appendedValue ? value : "");`
`997`	`998`	`}`
`998`	`999`
`999`		`- } catch (Exception e) {`
`1000`		`- LOGGER.error(e.getMessage(), e);`
	`1000`	`+ } catch (IOException e) {`
	`1001`	`+ LOGGER.debug(e.getMessage(), e);`
`1001`	`1002`	`}`
`1002`	`1003`	`}`
`1003`	`1004`
Original file line number	Diff line number	Diff line change
`@@ -272,7 +272,7 @@ && isPage200(verificationMsg)) {`
`272`	`272`	`} catch (URIException e) {`
`273`	`273`	`LOGGER.debug("Failed to send HTTP message, cause: {}", e.getMessage());`
`274`	`274`	`} catch (IOException e) {`
`275`		`- LOGGER.error(e.getMessage(), e);`
	`275`	`+ LOGGER.debug(e.getMessage(), e);`
`276`	`276`	`}`
`277`	`277`	`}`
`278`	`278`
Original file line number	Diff line number	Diff line change
`@@ -1042,9 +1042,9 @@ public void scan() {`
`1042`	`1042`	`if (os != null) os.close();`
`1043`	`1043`	`}`
`1044`	`1044`	`}`
`1045`		`- } catch (Exception e) {`
	`1045`	`+ } catch (IOException e) {`
`1046`	`1046`	`// needed to catch exceptions from the "finally" statement`
`1047`		`- LOGGER.error("Error scanning a node for HeartBleed: {}", e.getMessage(), e);`
	`1047`	`+ LOGGER.debug("Error scanning a node for HeartBleed: {}", e.getMessage(), e);`
`1048`	`1048`	`}`
`1049`	`1049`	`}`
`1050`	`1050`
Original file line number	Diff line number	Diff line change
`@@ -19,6 +19,7 @@`
`19`	`19`	`*/`
`20`	`20`	`package org.zaproxy.zap.extension.ascanrules;`
`21`	`21`
	`22`	`+import java.io.IOException;`
`22`	`23`	`import java.util.Arrays;`
`23`	`24`	`import java.util.Collections;`
`24`	`25`	`import java.util.HashMap;`
`@@ -146,8 +147,8 @@ private List<HtmlContext> performAttack(`
`146`	`147`	`setParameter(sourceMsg2, param, attack);`
`147`	`148`	`try {`
`148`	`149`	`sendAndReceive(sourceMsg2);`
`149`		`- } catch (Exception e) {`
`150`		`- LOGGER.error(e.getMessage(), e);`
	`150`	`+ } catch (IOException e) {`
	`151`	`+ LOGGER.debug(e.getMessage(), e);`
`151`	`152`	`}`
`152`	`153`
`153`	`154`	`if (isStop()) {`
`@@ -157,8 +158,8 @@ private List<HtmlContext> performAttack(`
`157`	`158`	`HttpMessage sinkMsg2 = sinkMsg.cloneRequest();`
`158`	`159`	`try {`
`159`	`160`	`sendAndReceive(sinkMsg2);`
`160`		`- } catch (Exception e) {`
`161`		`- LOGGER.error(e.getMessage(), e);`
	`161`	`+ } catch (IOException e) {`
	`162`	`+ LOGGER.debug(e.getMessage(), e);`
`162`	`163`	`}`
`163`	`164`
`164`	`165`	`if (isStop()) {`
`@@ -690,8 +691,8 @@ public void scan(HttpMessage sourceMsg, String param, String value) {`
`690`	`691`	`}`
`691`	`692`	`}`
`692`	`693`	`}`
`693`		`- } catch (Exception e) {`
`694`		`- LOGGER.error(e.getMessage(), e);`
	`694`	`+ } catch (IOException e) {`
	`695`	`+ LOGGER.debug(e.getMessage(), e);`
`695`	`696`	`}`
`696`	`697`	`}`
`697`	`698`