In IEG the communication between the Player and the Engine is coordinated by means of a sync token. The sync token is used to ensure that the page submitted by the browser is consistent with the page the IEG engine is expecting to be submitted. This facilitates detecting when the user uses the browser navigation buttons rather than the navigation buttons in the Player itself. The sync token changes for every question page that is displayed in the IEG Player. This makes it very difficult to scan IEG question scripts executing in the IEG player.
For this reason, prior to scanning it is recommended that the script configuration property appscan.mode.enabled should be set to true. When this property is set to true, the Engine does not check the value o the sync token that is passed by the Player. Disabling sync token checking is acceptable when performing a scan but sync token checking should always be enabled in a production environment.
Also, in order to reduce the amount of superfluous information reported in a scan the stack trace should be disabled. To disable the stack trace: