ope.<br>
Post 2.5.0 you can specify a comma separated list of identifiers in the 
<code>rules.csrf.ignorelist</code> parameter via the Options 'Rule configuration' panel.
Any FORMs with a name or ID that matches one of these identifiers will be ignored when scanning for missing Anti-CSRF tokens.
Only use this feature to ignore FORMs that you know are safe, for example search forms.
<p>
Note: GET requests are only evaluated at Low Threshold.
<p>
Latest code: <a href="https://github.com/zaproxy/zap-extensions