New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ZAP Scan Baseline Report #88

Closed

github-actions bot opened this issue Apr 7, 2020 · 1 comment

github-actions bot commented Apr 7, 2020

Site[https://www.zaproxy.org]
New Alerts
- Alert[10035] count(20): Strict-Transport-Security Header Not Set
- Alert[10098] count(20): Cross-Domain Misconfiguration
- Alert[10050] count(20): Retrieved from Cache
- Alert[10017] count(20): Cross-Domain JavaScript Source File Inclusion
- Alert[10021] count(20): X-Content-Type-Options Header Missing
- Alert[10096] count(20): Timestamp Disclosure - Unix
- Alert[10015] count(20): Incomplete or No Cache-control and Pragma HTTP Header Set
- Alert[10038] count(20): Content Security Policy (CSP) Header Not Set
- Alert[90022] count(3): Application Error Disclosure
- Alert[10023] count(2): Information Disclosure - Debug Error Messages
- Alert[10027] count(4): Information Disclosure - Suspicious Comments
- Alert[10011] count(2): Cookie Without Secure Flag
- Alert[90033] count(3): Loosely Scoped Cookie
- Alert[2] count(3): Private IP Disclosure
- Alert[10062] count(2): PII Scanner
- Alert[10108] count(1): Reverse Tabnabbing

View the following link to download the report.
RunnerID:72792259

Author

github-actions bot commented Apr 7, 2020

All the alerts have been resolved during the last ZAP Scan!

github-actions bot closed this as completed

This was referenced Apr 7, 2020

Baseline action tweaks zaproxy/zaproxy#5929

Closed

Baseline action tweaks zaproxy/action-baseline#3

Closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment