I'm using ZAP 2.6, Standard mode. I have white-listed all the parameter inputs. Running Active Scan, I get a SQL Injection Alert that I just cannot understand: When GETing the original ... Include my ...

Here is the old HTML version of the alert: Now, when you go to manage your alerts, there is a button to switch to text alerts. But when you click it, it doesn't take and the HTML versions continue.