Skip to content

馃帹 Design: Allow saving On-demand Scans with "active scan" & "unvalidated site" config

We currently don't allow users to save an On-demand Scans when user selects

  • Scanner Profile with Active scan
  • Site Profile with un-validated target url

image

Problem

When user is setting up a new scan, it's not possible to validate a new website straightway.

With inline profiles creation coming, it would create a bad UX when user wants to setup an active scan with a new target. They would need to leave the On-demand scans form to first validate the url and then redo the form again.

Note: We'd still save these values in local storage though.

Proposal

We should allow users to save the configuration but restrict them to run a scan for the scenario (active scan with un-validated target url)

  • Keep Save button in enabled state always
  • Keep Save & run button disabled in such scenario (no change)
  • Modify alert on the configuration page; change form error to warning
  • Restrict user to run scan from Saved Scans page in such scenario
  • Add a warning badge to the right of the scan name
  • Add a popover to the warning badge with details about the issue
Edited by Michael Fangman