ZAP report for responders-portal-ui #75

github-actions · 2023-08-07T10:14:30Z

Site: https://era-responders-dev.apps.silver.devops.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 3:
- CSP: script-src unsafe-eval [10055] total: 3:
- CSP: script-src unsafe-inline [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- Proxy Disclosure [40025] total: 9:
- Sub Resource Integrity Attribute Missing [90003] total: 4:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- Dangerous JS Functions [10110] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Permissions Policy Header Not Set [10063] total: 7:
- Timestamp Disclosure - Unix [10096] total: 18:
- Cookie Slack Detector [90027] total: 9:
- Information Disclosure - Suspicious Comments [10027] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- Re-examine Cache-control Directives [10015] total: 5:
- Session Management Response Identified [10112] total: 3:
- Storable and Cacheable Content [10049] total: 8:

View the following link to download the report.
RunnerID:5783817894

github-actions · 2023-08-14T10:13:51Z

Site: https://era-responders-dev.apps.silver.devops.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 3:
- CSP: script-src unsafe-eval [10055] total: 3:
- CSP: script-src unsafe-inline [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- Proxy Disclosure [40025] total: 9:
- Sub Resource Integrity Attribute Missing [90003] total: 4:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- Dangerous JS Functions [10110] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Permissions Policy Header Not Set [10063] total: 7:
- Timestamp Disclosure - Unix [10096] total: 18:
- Cookie Slack Detector [90027] total: 9:
- Information Disclosure - Suspicious Comments [10027] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- Re-examine Cache-control Directives [10015] total: 5:
- Session Management Response Identified [10112] total: 3:
- Storable and Cacheable Content [10049] total: 8:

View the following link to download the report.
RunnerID:5854480812

github-actions · 2023-08-21T10:14:05Z

Site: https://era-responders-dev.apps.silver.devops.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 3:
- CSP: script-src unsafe-eval [10055] total: 3:
- CSP: script-src unsafe-inline [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- Proxy Disclosure [40025] total: 9:
- Sub Resource Integrity Attribute Missing [90003] total: 4:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- Dangerous JS Functions [10110] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Permissions Policy Header Not Set [10063] total: 7:
- Timestamp Disclosure - Unix [10096] total: 18:
- Cookie Slack Detector [90027] total: 9:
- Information Disclosure - Suspicious Comments [10027] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- Re-examine Cache-control Directives [10015] total: 5:
- Session Management Response Identified [10112] total: 3:
- Storable and Cacheable Content [10049] total: 8:

View the following link to download the report.
RunnerID:5924897161

github-actions · 2023-08-28T10:14:14Z

Site: https://era-responders-dev.apps.silver.devops.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 3:
- CSP: script-src unsafe-eval [10055] total: 3:
- CSP: script-src unsafe-inline [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- Proxy Disclosure [40025] total: 9:
- Sub Resource Integrity Attribute Missing [90003] total: 4:
- Cookie with SameSite Attribute None [10054] total: 4:
- Dangerous JS Functions [10110] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Permissions Policy Header Not Set [10063] total: 7:
- Timestamp Disclosure - Unix [10096] total: 18:
- Cookie Slack Detector [90027] total: 9:
- Information Disclosure - Suspicious Comments [10027] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 4:
- Re-examine Cache-control Directives [10015] total: 4:
- Session Management Response Identified [10112] total: 6:
- Storable and Cacheable Content [10049] total: 5:

View the following link to download the report.
RunnerID:5998526203

github-actions · 2023-09-04T10:14:40Z

Site: https://era-responders-dev.apps.silver.devops.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 3:
- CSP: script-src unsafe-eval [10055] total: 3:
- CSP: script-src unsafe-inline [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- Proxy Disclosure [40025] total: 9:
- Sub Resource Integrity Attribute Missing [90003] total: 4:
- Cookie with SameSite Attribute None [10054] total: 4:
- Dangerous JS Functions [10110] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Permissions Policy Header Not Set [10063] total: 7:
- Timestamp Disclosure - Unix [10096] total: 18:
- Cookie Slack Detector [90027] total: 9:
- Information Disclosure - Suspicious Comments [10027] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 4:
- Re-examine Cache-control Directives [10015] total: 4:
- Session Management Response Identified [10112] total: 7:
- Storable and Cacheable Content [10049] total: 5:

View the following link to download the report.
RunnerID:6072057795

github-actions · 2023-09-11T10:14:16Z

Site: https://era-responders-dev.apps.silver.devops.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 3:
- CSP: script-src unsafe-eval [10055] total: 3:
- CSP: script-src unsafe-inline [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- Proxy Disclosure [40025] total: 9:
- Sub Resource Integrity Attribute Missing [90003] total: 4:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- Dangerous JS Functions [10110] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Permissions Policy Header Not Set [10063] total: 7:
- Timestamp Disclosure - Unix [10096] total: 18:
- Cookie Slack Detector [90027] total: 9:
- Information Disclosure - Suspicious Comments [10027] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- Re-examine Cache-control Directives [10015] total: 5:
- Session Management Response Identified [10112] total: 3:
- Storable and Cacheable Content [10049] total: 8:

View the following link to download the report.
RunnerID:6144972379

github-actions · 2023-09-18T10:14:17Z

Site: https://era-responders-dev.apps.silver.devops.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 3:
- CSP: script-src unsafe-eval [10055] total: 3:
- CSP: script-src unsafe-inline [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- Proxy Disclosure [40025] total: 9:
- Sub Resource Integrity Attribute Missing [90003] total: 4:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- Dangerous JS Functions [10110] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Permissions Policy Header Not Set [10063] total: 7:
- Timestamp Disclosure - Unix [10096] total: 18:
- Cookie Slack Detector [90027] total: 9:
- Information Disclosure - Suspicious Comments [10027] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- Re-examine Cache-control Directives [10015] total: 5:
- Session Management Response Identified [10112] total: 3:
- Storable and Cacheable Content [10049] total: 8:

View the following link to download the report.
RunnerID:6221120180

github-actions · 2023-09-25T10:14:16Z

Site: https://era-responders-dev.apps.silver.devops.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/sitemap.xml
- CSP: script-src unsafe-eval [10055] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/sitemap.xml
- CSP: script-src unsafe-inline [10055] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/sitemap.xml
- CSP: style-src unsafe-inline [10055] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/sitemap.xml
- Proxy Disclosure [40025] total: 9:
- Sub Resource Integrity Attribute Missing [90003] total: 4:
- Cookie with SameSite Attribute None [10054] total: 4:
- Dangerous JS Functions [10110] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Permissions Policy Header Not Set [10063] total: 7:
- Timestamp Disclosure - Unix [10096] total: 18:
- Cookie Slack Detector [90027] total: 9:
- Information Disclosure - Suspicious Comments [10027] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 4:
- Re-examine Cache-control Directives [10015] total: 4:
- Session Management Response Identified [10112] total: 6:
- Storable and Cacheable Content [10049] total: 5:

View the following link to download the report.
RunnerID:6297913761

github-actions · 2023-10-02T10:14:08Z

Site: https://era-responders-dev.apps.silver.devops.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 3:
- CSP: script-src unsafe-eval [10055] total: 3:
- CSP: script-src unsafe-inline [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- Proxy Disclosure [40025] total: 9:
- Sub Resource Integrity Attribute Missing [90003] total: 4:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- Dangerous JS Functions [10110] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Permissions Policy Header Not Set [10063] total: 7:
- Timestamp Disclosure - Unix [10096] total: 18:
- Cookie Slack Detector [90027] total: 9:
- Information Disclosure - Suspicious Comments [10027] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- Re-examine Cache-control Directives [10015] total: 5:
- Session Management Response Identified [10112] total: 3:
- Storable and Cacheable Content [10049] total: 8:

View the following link to download the report.
RunnerID:6378767733

github-actions · 2023-10-09T10:15:52Z

Site: https://era-responders-dev.apps.silver.devops.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- CSP: script-src unsafe-eval [10055] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- CSP: script-src unsafe-inline [10055] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- CSP: style-src unsafe-inline [10055] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- Proxy Disclosure [40025] total: 9:
- Sub Resource Integrity Attribute Missing [90003] total: 4:
- Cookie with SameSite Attribute None [10054] total: 4:
- Dangerous JS Functions [10110] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Permissions Policy Header Not Set [10063] total: 7:
- Timestamp Disclosure - Unix [10096] total: 18:
- Cookie Slack Detector [90027] total: 9:
- Information Disclosure - Suspicious Comments [10027] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 4:
- Re-examine Cache-control Directives [10015] total: 4:
- Session Management Response Identified [10112] total: 6:
- Storable and Cacheable Content [10049] total: 5:

View the following link to download the report.
RunnerID:6455231234

github-actions · 2023-10-16T10:16:06Z

Site: https://era-responders-dev.apps.silver.devops.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- CSP: script-src unsafe-eval [10055] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- CSP: script-src unsafe-inline [10055] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- CSP: style-src unsafe-inline [10055] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- Proxy Disclosure [40025] total: 9:
- Sub Resource Integrity Attribute Missing [90003] total: 4:
- Cookie with SameSite Attribute None [10054] total: 4:
- Dangerous JS Functions [10110] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Permissions Policy Header Not Set [10063] total: 7:
- Timestamp Disclosure - Unix [10096] total: 18:
- Cookie Slack Detector [90027] total: 9:
- Information Disclosure - Suspicious Comments [10027] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 4:
- Re-examine Cache-control Directives [10015] total: 4:
- Session Management Response Identified [10112] total: 6:
- Storable and Cacheable Content [10049] total: 5:

View the following link to download the report.
RunnerID:6532138428

github-actions · 2023-10-23T10:16:05Z

Site: https://era-responders-dev.apps.silver.devops.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- CSP: script-src unsafe-eval [10055] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- CSP: script-src unsafe-inline [10055] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- CSP: style-src unsafe-inline [10055] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- Proxy Disclosure [40025] total: 9:
- Sub Resource Integrity Attribute Missing [90003] total: 4:
- Cookie with SameSite Attribute None [10054] total: 4:
- Dangerous JS Functions [10110] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Timestamp Disclosure - Unix [10096] total: 18:
- Cookie Slack Detector [90027] total: 9:
- Information Disclosure - Suspicious Comments [10027] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Modern Web Application [10109] total: 4:
- Re-examine Cache-control Directives [10015] total: 4:
- Session Management Response Identified [10112] total: 8:
Resolved Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
- A Server Error response code was returned by the server [100000] total: 5:
- Strict-Transport-Security Header Not Set [10035] total: 1:
- Unexpected Content-Type was returned [100001] total: 62:
- A Client Error response code was returned by the server [100000] total: 3:

View the following link to download the report.
RunnerID:6611806250

github-actions · 2023-10-30T10:15:06Z

Site: https://era-responders-dev.apps.silver.devops.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 3:
- CSP: script-src unsafe-eval [10055] total: 3:
- CSP: script-src unsafe-inline [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- Proxy Disclosure [40025] total: 9:
- Sub Resource Integrity Attribute Missing [90003] total: 4:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- Dangerous JS Functions [10110] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Permissions Policy Header Not Set [10063] total: 7:
- Timestamp Disclosure - Unix [10096] total: 18:
- Cookie Slack Detector [90027] total: 9:
- Information Disclosure - Suspicious Comments [10027] total: 1:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/main.771e78da3a72f892.js
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 2:
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca
  - https://era-responders-dev.apps.silver.devops.gov.bc.ca/
- Re-examine Cache-control Directives [10015] total: 5:
- Session Management Response Identified [10112] total: 3:
- Storable and Cacheable Content [10049] total: 8:

View the following link to download the report.
RunnerID:6691276427

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

ZAP report for responders-portal-ui #75

ZAP report for responders-portal-ui #75

github-actions bot commented Aug 7, 2023

github-actions bot commented Aug 14, 2023

github-actions bot commented Aug 21, 2023

github-actions bot commented Aug 28, 2023

github-actions bot commented Sep 4, 2023

github-actions bot commented Sep 11, 2023

github-actions bot commented Sep 18, 2023

github-actions bot commented Sep 25, 2023

github-actions bot commented Oct 2, 2023

github-actions bot commented Oct 9, 2023

github-actions bot commented Oct 16, 2023

github-actions bot commented Oct 23, 2023

github-actions bot commented Oct 30, 2023

ZAP report for responders-portal-ui #75

ZAP report for responders-portal-ui #75

Comments

github-actions bot commented Aug 7, 2023

github-actions bot commented Aug 14, 2023

github-actions bot commented Aug 21, 2023

github-actions bot commented Aug 28, 2023

github-actions bot commented Sep 4, 2023

github-actions bot commented Sep 11, 2023

github-actions bot commented Sep 18, 2023

github-actions bot commented Sep 25, 2023

github-actions bot commented Oct 2, 2023

github-actions bot commented Oct 9, 2023

github-actions bot commented Oct 16, 2023

github-actions bot commented Oct 23, 2023

github-actions bot commented Oct 30, 2023