ZAP Full Scan Report

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/second-page
    • http://localhost:3000/via-gateway
    • http://localhost:3000/workflow-test
  • Integer Overflow Error [30003] total: 1:
    • http://localhost:3000/users/auth/github
  • Timestamp Disclosure - Unix [10096] total: 2:
    • http://localhost:3000/assets/application-a88e779960a4e6d23565ac12e238c6dc40f827876ae943f7a737fdfc0f3b165f.js
    • http://localhost:3000/assets/application-a88e779960a4e6d23565ac12e238c6dc40f827876ae943f7a737fdfc0f3b165f.js
  • Content Security Policy (CSP) Report-Only Header Found [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/second-page
    • http://localhost:3000/via-gateway
    • http://localhost:3000/workflow-test
  • Content-Type Header Missing [10019] total: 1:
    • http://localhost:3000/users/auth/github
  • Information Disclosure - Suspicious Comments [10027] total: 1:
    • http://localhost:3000/assets/application-a88e779960a4e6d23565ac12e238c6dc40f827876ae943f7a737fdfc0f3b165f.js
  • Loosely Scoped Cookie [90033] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/second-page
    • http://localhost:3000/via-gateway
    • http://localhost:3000/workflow-test
    • ..
  • User Agent Fuzzer [10104] total: 42:
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • ..

View the following link to download the report. RunnerID:1973189000

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
  • Content Security Policy (CSP) Report-Only Header Found [10038] total: 4:

View the following link to download the report. RunnerID:1986507731

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Modern Web Application [10109] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/contact
    • http://localhost:3000/expiration-testing
    • http://localhost:3000/non-discrimination-policy
    • http://localhost:3000/privacy
    • ..

View the following link to download the report. RunnerID:2039869638

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 4:
    • http://localhost:3000/events
    • http://localhost:3000/events?audience%5B%5D=NIH+Staff+Scientist%2FStaff+Clinician
    • http://localhost:3000/events?audience%5B%5D=Postbacs
    • http://localhost:3000/events?audience%5B%5D=Summer+Interns
  • Anti-CSRF Tokens Check [20012] total: 2:
    • http://localhost:3000/events
    • http://localhost:3000/events?audience%5B%5D=Postbacs
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 3:
    • http://localhost:3000/events?audience%5B%5D=NIH+Staff+Scientist%2FStaff+Clinician
    • http://localhost:3000/events?audience%5B%5D=Postbacs
    • http://localhost:3000/events?audience%5B%5D=Summer+Interns

View the following link to download the report. RunnerID:2102274956