ZAP Full Scan Report - Githubissues

github-actions[bot] commented 1 year ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- CSP: script-src unsafe-eval [10055] total: 3:
- CSP: script-src unsafe-inline [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- CSP: Notices [10055] total: 3:
- Cookie Slack Detector [90027] total: 2:
  - https://get-into-teaching-app-dev.london.cloudapps.digital
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
- Base64 Disclosure [10094] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
- Information Disclosure - Suspicious Comments [10027] total: 2:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
- Modern Web Application [10109] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
- Non-Storable Content [10049] total: 4:
- Re-examine Cache-control Directives [10015] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
- User Agent Fuzzer [10104] total: 24:
  Ignored Alerts
- Permissions Policy Header Not Set [10063] total: 3:

View the following link to download the report. RunnerID:5444073280

github-actions[bot] commented 1 year ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- Session Management Response Identified [10112] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/

View the following link to download the report. RunnerID:5529066626

github-actions[bot] commented 1 year ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- Sub Resource Integrity Attribute Missing [90003] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/

View the following link to download the report. RunnerID:5584931845

github-actions[bot] commented 1 year ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- Sec-Fetch-Dest Header is Missing [90005] total: 2:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  - https://get-into-teaching-app-dev.london.cloudapps.digital/robots.txt
- Sec-Fetch-Mode Header is Missing [90005] total: 2:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  - https://get-into-teaching-app-dev.london.cloudapps.digital/robots.txt
- Sec-Fetch-Site Header is Missing [90005] total: 2:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  - https://get-into-teaching-app-dev.london.cloudapps.digital/robots.txt
- Sec-Fetch-User Header is Missing [90005] total: 2:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  - https://get-into-teaching-app-dev.london.cloudapps.digital/robots.txt

View the following link to download the report. RunnerID:5620243089

github-actions[bot] commented 1 year ago

Site: https://get-into-teaching-app-development.test.teacherservices.cloud New Alerts
- CSP: script-src unsafe-eval [10055] total: 2:
  - https://get-into-teaching-app-development.test.teacherservices.cloud/
  - https://get-into-teaching-app-development.test.teacherservices.cloud/sitemap.xml
- CSP: script-src unsafe-inline [10055] total: 2:
  - https://get-into-teaching-app-development.test.teacherservices.cloud/
  - https://get-into-teaching-app-development.test.teacherservices.cloud/sitemap.xml
- CSP: style-src unsafe-inline [10055] total: 2:
  - https://get-into-teaching-app-development.test.teacherservices.cloud/
  - https://get-into-teaching-app-development.test.teacherservices.cloud/sitemap.xml
- CSP: Notices [10055] total: 2:
  - https://get-into-teaching-app-development.test.teacherservices.cloud/
  - https://get-into-teaching-app-development.test.teacherservices.cloud/sitemap.xml
- Non-Storable Content [10049] total: 3:
- Sec-Fetch-Dest Header is Missing [90005] total: 2:
  - https://get-into-teaching-app-development.test.teacherservices.cloud/
  - https://get-into-teaching-app-development.test.teacherservices.cloud/sitemap.xml
- Sec-Fetch-Mode Header is Missing [90005] total: 2:
  - https://get-into-teaching-app-development.test.teacherservices.cloud/
  - https://get-into-teaching-app-development.test.teacherservices.cloud/sitemap.xml
- Sec-Fetch-Site Header is Missing [90005] total: 2:
  - https://get-into-teaching-app-development.test.teacherservices.cloud/
  - https://get-into-teaching-app-development.test.teacherservices.cloud/sitemap.xml
- Sec-Fetch-User Header is Missing [90005] total: 2:
  - https://get-into-teaching-app-development.test.teacherservices.cloud/
  - https://get-into-teaching-app-development.test.teacherservices.cloud/sitemap.xml
  Ignored Alerts
- Permissions Policy Header Not Set [10063] total: 3:

View the following link to download the report. RunnerID:6468098413

github-actions[bot] commented 1 year ago

Site: https://get-into-teaching-app-dev.london.cloudapps.digital New Alerts
- CSP: script-src unsafe-eval [10055] total: 3:
- CSP: script-src unsafe-inline [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- Sub Resource Integrity Attribute Missing [90003] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
- CSP: Notices [10055] total: 3:
- Cookie Slack Detector [90027] total: 2:
  - https://get-into-teaching-app-dev.london.cloudapps.digital
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
- Base64 Disclosure [10094] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
- Information Disclosure - Suspicious Comments [10027] total: 2:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
- Modern Web Application [10109] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
- Non-Storable Content [10049] total: 4:
- Re-examine Cache-control Directives [10015] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
- Sec-Fetch-Dest Header is Missing [90005] total: 2:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  - https://get-into-teaching-app-dev.london.cloudapps.digital/robots.txt
- Sec-Fetch-Mode Header is Missing [90005] total: 2:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  - https://get-into-teaching-app-dev.london.cloudapps.digital/robots.txt
- Sec-Fetch-Site Header is Missing [90005] total: 2:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  - https://get-into-teaching-app-dev.london.cloudapps.digital/robots.txt
- Sec-Fetch-User Header is Missing [90005] total: 2:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
  - https://get-into-teaching-app-dev.london.cloudapps.digital/robots.txt
- Session Management Response Identified [10112] total: 1:
  - https://get-into-teaching-app-dev.london.cloudapps.digital/
- User Agent Fuzzer [10104] total: 24:
  Ignored Alerts
- Permissions Policy Header Not Set [10063] total: 3:

View the following link to download the report. RunnerID:6469172632

github-actions[bot] commented 1 year ago

Site: https://get-into-teaching-app-development.test.teacherservices.cloud New Alerts
- CSP: script-src unsafe-eval [10055] total: 2:
  - https://get-into-teaching-app-development.test.teacherservices.cloud/
  - https://get-into-teaching-app-development.test.teacherservices.cloud/robots.txt
- CSP: script-src unsafe-inline [10055] total: 2:
  - https://get-into-teaching-app-development.test.teacherservices.cloud/
  - https://get-into-teaching-app-development.test.teacherservices.cloud/robots.txt
- CSP: style-src unsafe-inline [10055] total: 2:
  - https://get-into-teaching-app-development.test.teacherservices.cloud/
  - https://get-into-teaching-app-development.test.teacherservices.cloud/robots.txt
- CSP: Notices [10055] total: 2:
  - https://get-into-teaching-app-development.test.teacherservices.cloud/
  - https://get-into-teaching-app-development.test.teacherservices.cloud/robots.txt
- Non-Storable Content [10049] total: 3:
- Sec-Fetch-Dest Header is Missing [90005] total: 2:
  - https://get-into-teaching-app-development.test.teacherservices.cloud/
  - https://get-into-teaching-app-development.test.teacherservices.cloud/robots.txt
- Sec-Fetch-Mode Header is Missing [90005] total: 2:
  - https://get-into-teaching-app-development.test.teacherservices.cloud/
  - https://get-into-teaching-app-development.test.teacherservices.cloud/robots.txt
- Sec-Fetch-Site Header is Missing [90005] total: 2:
  - https://get-into-teaching-app-development.test.teacherservices.cloud/
  - https://get-into-teaching-app-development.test.teacherservices.cloud/robots.txt
- Sec-Fetch-User Header is Missing [90005] total: 2:
  - https://get-into-teaching-app-development.test.teacherservices.cloud/
  - https://get-into-teaching-app-development.test.teacherservices.cloud/robots.txt
  Ignored Alerts
- Permissions Policy Header Not Set [10063] total: 3:

View the following link to download the report. RunnerID:6469397286

DFE-Digital / get-into-teaching-app

ZAP Full Scan Report #3382