New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ZAP: Backend #2020

Open

github-actions bot opened this issue Jun 24, 2024 · 3 comments

github-actions bot commented Jun 24, 2024

Site: https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca
New Alerts
- CORS Misconfiguration [40040] total: 1:
  - https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/api
- CSP: Wildcard Directive [10055] total: 5:
- CSP: script-src unsafe-eval [10055] total: 4:
- CSP: style-src unsafe-inline [10055] total: 5:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/api
- Proxy Disclosure [40025] total: 11:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/
  - https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/api
- Strict-Transport-Security Multiple Header Entries (Non-compliant with Spec) [10035] total: 1:
  - https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/api
- Timestamp Disclosure - Unix [10096] total: 2:
  - https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-C9taJFgq.js
  - https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/assets/react-DoTiAKKb.js
- Cookie Slack Detector [90027] total: 11:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Modern Web Application [10109] total: 3:

View the following link to download the report.
RunnerID:9652923502

ZAP is supported by the Crash Override Open Source Fellowship

DerekRoberts pinned this issue

Author

github-actions bot commented Jul 6, 2024

Site: https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca
New Alerts
- Deprecated Feature Policy Header Set [10063] total: 8:
- Base64 Disclosure [10094] total: 1:
  - https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-C9taJFgq.js
- Non-Storable Content [10049] total: 9:
- Sec-Fetch-Dest Header is Missing [90005] total: 4:
- Sec-Fetch-Mode Header is Missing [90005] total: 4:
- Sec-Fetch-Site Header is Missing [90005] total: 4:
- Sec-Fetch-User Header is Missing [90005] total: 4:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report.
RunnerID:9818752297

Author

github-actions bot commented Sep 7, 2024

Site: https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca
New Alerts
- User Agent Fuzzer [10104] total: 1:
  - https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-CCnv7czV.js

View the following link to download the report.
RunnerID:10750870482

Author

github-actions bot commented Sep 14, 2024

Site: https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca
Resolved Alerts
- User Agent Fuzzer [10104] total: 1:

View the following link to download the report.
RunnerID:10861878683

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment