Burp Scanner now automatically audits in-scope API requests that are issued from client-side JavaScript using XHR and Fetch. Work with WebSockets and Burp project files when building Burp extensions ...