New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ZAP Full Scan Report #854

Open

github-actions bot opened this issue Aug 24, 2023 · 5 comments

github-actions bot commented Aug 24, 2023

Site: https://alphasite.dts-stn.com
New Alerts
- CORS Misconfiguration [40040] total: 4:
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- Cross-Domain Misconfiguration [10098] total: 3:
- Proxy Disclosure [40025] total: 4:
- Permissions Policy Header Not Set [10063] total: 3:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 3:
- Strict-Transport-Security Header Not Set [10035] total: 3:
- Non-Storable Content [10049] total: 4:
- User Agent Fuzzer [10104] total: 38:

View the following link to download the report.
RunnerID:5967616453

Author

github-actions bot commented Nov 22, 2023

Site: http://localhost:3000
New Alerts
- Cloud Metadata Potentially Exposed [90034] total: 1:
  - http://localhost:3000/latest/meta-data/
- CSP: script-src unsafe-inline [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Hidden File Found [40035] total: 1:
  - http://localhost:3000/BitKeeper
- Sub Resource Integrity Attribute Missing [90003] total: 10:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 11:
- Permissions Policy Header Not Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 1:
  - http://localhost:3000/_next/static/chunks/main-519e79436c4ae42d.js
- X-Content-Type-Options Header Missing [10021] total: 12:
- Content-Type Header Missing [10019] total: 4:
- Information Disclosure - Suspicious Comments [10027] total: 11:
- Modern Web Application [10109] total: 11:
- Non-Storable Content [10049] total: 3:
- Storable and Cacheable Content [10049] total: 7:
- Storable but Non-Cacheable Content [10049] total: 1:
  - http://localhost:3000/favicon.ico
- User Agent Fuzzer [10104] total: 52:

View the following link to download the report.
RunnerID:6956908789

Author

github-actions bot commented Nov 22, 2023

Site: http://localhost:3000
New Alerts

View the following link to download the report.
RunnerID:6956906712

Author

github-actions bot commented Nov 22, 2023

Site: http://localhost:3000
Resolved Alerts
- Absence of Anti-CSRF Tokens [10202] total: 12:
- Anti-CSRF Tokens Check [20012] total: 24:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 18:

View the following link to download the report.
RunnerID:6959033953

Author

github-actions bot commented Jan 31, 2024

Site: http://localhost:3000
Resolved Alerts
- Cloud Metadata Potentially Exposed [90034] total: 1:
- Hidden File Found [40035] total: 1:

View the following link to download the report.
RunnerID:7729556780

Author

github-actions bot commented Feb 27, 2024

Site: http://localhost:3000
New Alerts
- Source Code Disclosure - File Inclusion [43] total: 1:
  - http://localhost:3000/_next/image?q=75&url=https%3A%2F%2Fwww.canada.ca%2Fcontent%2Fdam%2Fdecd-endc%2Fimages%2Fsclabs%2Fdigital-standards-playbook%2Fdigital-standards-awareness-fig1-fra.jpg&w=2048
- Application Error Disclosure [90022] total: 12:

View the following link to download the report.
RunnerID:8069782218

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment