This repository has been archived by the owner on Dec 9, 2020. It is now read-only.

ZAP Scan Baseline Report #159

Open

github-actions bot opened this issue Oct 6, 2020 · 0 comments

github-actions bot commented Oct 6, 2020

Site: https://wps-web-pr-158.pathfinder.gov.bc.ca
New Alerts
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 12:
- Strict-Transport-Security Header Not Set [10035] total: 12:
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
  - https://wps-web-pr-158.pathfinder.gov.bc.ca
  - https://wps-web-pr-158.pathfinder.gov.bc.ca/
- Cross-Domain JavaScript Source File Inclusion [10017] total: 2:
  - https://wps-web-pr-158.pathfinder.gov.bc.ca
  - https://wps-web-pr-158.pathfinder.gov.bc.ca/
- X-Content-Type-Options Header Missing [10021] total: 11:
- Cookie Without SameSite Attribute [10054] total: 2:
  - https://wps-web-pr-158.pathfinder.gov.bc.ca/robots.txt
  - https://wps-web-pr-158.pathfinder.gov.bc.ca/
- Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 5:
- CSP Scanner: Wildcard Directive [10055] total: 1:
  - https://wps-web-pr-158.pathfinder.gov.bc.ca/sitemap.xml
- Information Disclosure - Suspicious Comments [10027] total: 2:
  - https://wps-web-pr-158.pathfinder.gov.bc.ca
  - https://wps-web-pr-158.pathfinder.gov.bc.ca/
- Information Disclosure - Suspicious Comments [10027] total: 2:
  - https://wps-web-pr-158.pathfinder.gov.bc.ca/static/js/bundle.js
  - https://wps-web-pr-158.pathfinder.gov.bc.ca/static/js/main.chunk.js
- X-Frame-Options Header Not Set [10020] total: 2:
  - https://wps-web-pr-158.pathfinder.gov.bc.ca/
  - https://wps-web-pr-158.pathfinder.gov.bc.ca
- Modern Web Application [10109] total: 2:
  - https://wps-web-pr-158.pathfinder.gov.bc.ca
  - https://wps-web-pr-158.pathfinder.gov.bc.ca/

View the following link to download the report.
RunnerID:292105292

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.