diff --git a/doc/user/application_security/dast/authentication_troubleshooting.md b/doc/user/application_security/dast/authentication_troubleshooting.md index eb902eb452c1bff556c97a049fe83e1365d5c2fa..5e0ddbf2257426f7850fdcc03001ec233eda3a57 100644 --- a/doc/user/application_security/dast/authentication_troubleshooting.md +++ b/doc/user/application_security/dast/authentication_troubleshooting.md @@ -143,6 +143,8 @@ Suggested actions: in a full page reload, such as a request made when submitting a HTML form. This occurs when using websockets or AJAX to submit the login form. - If the page displayed following user authentication genuinely has elements matching the login form selectors, configure `DAST_AUTH_VERIFICATION_URL` or `DAST_AUTH_VERIFICATION_SELECTOR` to use an alternate method of verifying the login attempt. +- Some applications display a "Loading..." element on a page before hiding the login form. This can confuse the analyzer. Use `DAST_BROWSER_PAGE_LOADING_SELECTOR` or + `DAST_BROWSER_PAGE_READY_SELECTOR` [variable](browser/configuration/variables.md) to instruct the analyzer that the page has finished loading. ### Requirement unsatisfied, selector returned no results