A groundbreaking update to OWASP ZAP brings elusive browser-based vulnerabilities into the security spotlight.