ZAP Scan Baseline Report

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Timestamp Disclosure - Unix [10096] total: 2:
    • http://localhost:3000/assets/application-a88e779960a4e6d23565ac12e238c6dc40f827876ae943f7a737fdfc0f3b165f.js
    • http://localhost:3000/assets/application-a88e779960a4e6d23565ac12e238c6dc40f827876ae943f7a737fdfc0f3b165f.js
  • Content-Type Header Missing [10019] total: 1:
    • http://localhost:3000/users/auth/github
  • Information Disclosure - Suspicious Comments [10027] total: 1:
    • http://localhost:3000/assets/application-a88e779960a4e6d23565ac12e238c6dc40f827876ae943f7a737fdfc0f3b165f.js
  • Loosely Scoped Cookie [90033] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/second-page
    • http://localhost:3000/via-gateway
    • http://localhost:3000/workflow-test
    • ..

View the following link to download the report. RunnerID:1982093005

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 1:
    • http://localhost:3000/new-jobs-page
  • Application Error Disclosure [90022] total: 1:
    • http://localhost:3000/new-jobs-page

View the following link to download the report. RunnerID:2000696841

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 1:
  • Application Error Disclosure [90022] total: 1:

View the following link to download the report. RunnerID:2000886025

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 5:
    • http://localhost:3000/accessibility
    • http://localhost:3000/foia
    • http://localhost:3000/link-4
    • http://localhost:3000/link-5
    • http://localhost:3000/no-fear
  • Modern Web Application [10109] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/expiration-testing
    • http://localhost:3000/public-page
    • http://localhost:3000/wellness/meditation
    • http://localhost:3000/wellness/meditation/
    • ..

View the following link to download the report. RunnerID:2030722946

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 5:

View the following link to download the report. RunnerID:2031291181

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 2:
    • http://localhost:3000/events
    • http://localhost:3000/events?audience=Summer+Interns
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
    • http://localhost:3000/events?audience=Summer+Interns

View the following link to download the report. RunnerID:2068079315

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 2:
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:

View the following link to download the report. RunnerID:2071725100

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 2:
    • http://localhost:3000/events
    • http://localhost:3000/events?audience%5B%5D=Summer+Interns
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
    • http://localhost:3000/events?audience%5B%5D=Summer+Interns

View the following link to download the report. RunnerID:2073947860

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 2:
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:

View the following link to download the report. RunnerID:2077229850

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 4:
    • http://localhost:3000/events
    • http://localhost:3000/events?audience%5B%5D=NIH+Staff+Scientist%2FStaff+Clinician
    • http://localhost:3000/events?audience%5B%5D=Postbacs
    • http://localhost:3000/events?audience%5B%5D=Summer+Interns
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 3:
    • http://localhost:3000/events?audience%5B%5D=NIH+Staff+Scientist%2FStaff+Clinician
    • http://localhost:3000/events?audience%5B%5D=Postbacs
    • http://localhost:3000/events?audience%5B%5D=Summer+Interns

View the following link to download the report. RunnerID:2080315091

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Application Error Disclosure [90022] total: 1:
    • http://localhost:3000/sitemap.xml
  • Information Disclosure - Debug Error Messages [10023] total: 1:
    • http://localhost:3000/sitemap.xml

View the following link to download the report. RunnerID:2242043327

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts

  • HTTP to HTTPS Insecure Transition in Form Post [10041] total: 11:

    • http://localhost:3000/
    • http://localhost:3000/contact
    • http://localhost:3000/events
    • http://localhost:3000/events/202253-another-event
    • http://localhost:3000/expiration-testing
    • ..

    Resolved Alerts

  • Application Error Disclosure [90022] total: 1:
  • Information Disclosure - Debug Error Messages [10023] total: 1:

View the following link to download the report. RunnerID:2242118076

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • HTTP to HTTPS Insecure Transition in Form Post [10041] total: 11:

View the following link to download the report. RunnerID:2242158826