quests</h5>
Allows to scan the HTTP Headers of all requests. Not just requests that send parameters, through the query or request body.

<h4>Cookie Data</h4>
Request cookies.

<h5>Encode Cookie Values</h5>
If selected the cookie values will be URL encoded when attacked.
By default they will not be encoded - this is new in ZAP 2.15.0, previously they were always encoded.

<h3>Build-in Input Vector Handlers</h3>
The data formats that the active scanner will target:

<table>
<tr><td>&nbsp;&nbsp;&nbsp;&nbsp;</t