ZAP Full Scan Report - Githubissues

DFE-Digital / get-into-teaching-app

The Department for Education's Get Into Teaching website

https://getintoteaching.education.gov.uk

MIT License

14 stars 11 forks source link

ZAP Full Scan Report #2306

Open github-actions[bot] opened 2 years ago

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- CSP: script-src unsafe-inline [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- CSP: Notices [10055] total: 3:
- Dangerous JS Functions [10110] total: 2:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/packs/v1/js/application-d986f6001f5466372068.js
  - https://get-into-teaching-app-dev.london.cloudapps.digital/packs/v1/js/sentry-f53b621182504fe1f6e0.js
- Incomplete or No Cache-control Header Set [10015] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
- Timestamp Disclosure - Unix [10096] total: 4:
- Base64 Disclosure [10094] total: 3:
- CORS Header [40040] total: 18:
- Information Disclosure - Suspicious Comments [10027] total: 6:
- Modern Web Application [10109] total: 2:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  - https://get-into-teaching-app-dev.london.cloudapps.digital/packs/v1/js/application-d986f6001f5466372068.js
- Non-Storable Content [10049] total: 9:
- Storable and Cacheable Content [10049] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  Ignored Alerts
- Permissions Policy Header Not Set [10063] total: 10:

View the following link to download the report. RunnerID:1847624993

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- Sub Resource Integrity Attribute Missing [90003] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/

View the following link to download the report. RunnerID:1876715951

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- User Agent Fuzzer [10104] total: 7:

View the following link to download the report. RunnerID:2188846337

github-actions[bot] commented 2 years ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital Resolved Alerts
- User Agent Fuzzer [10104] total: 7:

View the following link to download the report. RunnerID:2188857797