Update the penetration test result for v8.2

[EngincanV]

Resolves https://github.com/volosoft/vs-internal/issues/4415

---

There is only one new alert, which is X-Content-Type-Options Header Missing [Risk: Low]. Here is how developers can set the related header:

abp-commercial-docs/en/others/penetration-test-report.md

Lines 305 to 327 in dbb5563

	### X-Content-Type-Options Header Missing [Risk: Low] - Positive (Fixed)
	- *[GET] — https://localhost:44349/client-proxies/account-proxy.js?_v=638550091940000000 (and other client-proxies related URLs)*
	- *[GET] — https://localhost:44349/favicon.svg*
	- *[GET] — https://localhost:44349/global-styles.css?_v=638556076064360335*
	- *[GET] — https://localhost:44349/libs/@fortawesome/fontawesome-free/css/all.css?_v=%5CWEB-INF%5Cweb.xml (other several URLs...)*
	- other URLs...
	**Description**:
	The Anti-MIME-Sniffing header `X-Content-Type-Options` was not set to 'nosniff'. This allows older versions of Internet Explorer and Chrome to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the declared content type. Current (early 2014) and legacy versions of Firefox will use the declared content type (if one is set), rather than performing MIME-sniffing.
	**Solution**:
	Ensure that the application/web server sets the Content-Type header appropriately, and that it sets the X-Content-Type-Options header to 'nosniff' for all web pages.
	If possible, ensure that the end user uses a standards-compliant and modern web browser that does not perform MIME-sniffing at all, or that can be directed by the web application/web server to not perform MIME-sniffing.
	**Explanation**:
	The `X-Content-Type-Options` header allows you to avoid MIME type sniffing by saying that the MIME types are deliberately configured. This headeer is not strictly required, but it is highly recommended for security reasons. While modern browsers have improved security features, you can still set this header for ensuring the security of web applications.
	You can add the [ABP's Security Header Middleware](https://docs.abp.io/en/abp/latest/UI/AspNetCore/Security-Headers#security-headers-middleware) into the request pipeline to set the `X-Content-Type-Options` as *no-sniff*. Also, this middleware adds other pre-defined security headers to your application, including `X-XSS-Protection`, `X-Frame-Options` and `Content-Security-Policy` (if it's enabled). Read the documentation for more info: [https://docs.abp.io/en/abp/latest/UI/AspNetCore/Security-Headers](https://docs.abp.io/en/abp/latest/UI/AspNetCore/Security-Headers).

[github-actions]

Images automagically compressed by Calibre's image-actions ✨

Compression reduced images by 36%, saving 31.82 KB.

Filename	Before	After	Improvement	Visual comparison
en/images/pen-test-alert-list-8.2.png	88.31 KB	56.50 KB	-36.0%	View diff

834 images did not require optimisation.