ZAP Full Scan Report - Githubissues

DFE-Digital / get-into-teaching-app

The Department for Education's Get Into Teaching website

https://getintoteaching.education.gov.uk

MIT License

14 stars 11 forks source link

ZAP Full Scan Report #1684

Open github-actions[bot] opened 3 years ago

github-actions[bot] commented 3 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- Non-Storable Content [10049] total: 5:
- CSP: script-src unsafe-inline [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- Information Disclosure - Suspicious Comments [10027] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
- User Agent Fuzzer [10104] total: 14:
- Cookie Slack Detector [90027] total: 2:
  - https://get-into-teaching-app-dev.london.cloudapps.digital
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
- CSP: Notices [10055] total: 3:
- Modern Web Application [10109] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
- Timestamp Disclosure - Unix [10096] total: 2:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  - https://get-into-teaching-app-dev.london.cloudapps.digital/robots.txt
- Base64 Disclosure [10094] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
- Incomplete or No Cache-control Header Set [10015] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  Ignored Alerts
- Permissions Policy Header Not Set [10063] total: 4:

View the following link to download the report. RunnerID:1185589392

github-actions[bot] commented 3 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1303677424

github-actions[bot] commented 3 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1307096947

github-actions[bot] commented 3 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1311054316

github-actions[bot] commented 3 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1315325843

github-actions[bot] commented 3 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1315623406

github-actions[bot] commented 3 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1315817046

github-actions[bot] commented 3 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1316170904

github-actions[bot] commented 3 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1316926818

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1319984655

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1321126190

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1328931185

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1329107920

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1329215638

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/sitemap.xml
  Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1332100843

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1332108325

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1332182283

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/sitemap.xml
  Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1332368144

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1332375375

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1332744608

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1333199638

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1333405424

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1333417738

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1333884818

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1336930333

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1337126544

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1337225002

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1337310001

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1341196145

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1341283006

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1342757998

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1345182803

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1345241942

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/robots.txt
  Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1345426688

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1345464426

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1345544859

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1345554527

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1345870451

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1346529007

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1346798799

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/robots.txt
  Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1353936075

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1354002743

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/sitemap.xml
  Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1354048815

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1355052551

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/sitemap.xml
  Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1355216691

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1358759136

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1359174078

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1363110181

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1363358787

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1364084722

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  Resolved Alerts
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
- Reverse Tabnabbing [10108] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report. RunnerID:1368113309

Previous Next