ZAP Full Scan Report - Githubissues

DFE-Digital / get-into-teaching-app

The Department for Education's Get Into Teaching website

https://getintoteaching.education.gov.uk

MIT License

14 stars 11 forks source link

ZAP Full Scan Report #3986

Open github-actions[bot] opened 1 month ago

github-actions[bot] commented 1 month ago

Site: https://get-into-teaching-app-development.test.teacherservices.cloud New Alerts
- CSP: script-src unsafe-eval [10055] total: 3:
- CSP: script-src unsafe-inline [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- CSP: Notices [10055] total: 3:
- Non-Storable Content [10049] total: 3:
- Sec-Fetch-Dest Header is Missing [90005] total: 3:
- Sec-Fetch-Mode Header is Missing [90005] total: 3:
- Sec-Fetch-Site Header is Missing [90005] total: 3:
- Sec-Fetch-User Header is Missing [90005] total: 3:
  Ignored Alerts
- Permissions Policy Header Not Set [10063] total: 3:

View the following link to download the report. RunnerID:9156401185

ZAP is supported by the Crash Override Open Source Fellowship

github-actions[bot] commented 1 month ago

Site: https://get-into-teaching-app-development.test.teacherservices.cloud Resolved Alerts
- Non-Storable Content [10049] total: 3:
- Sec-Fetch-Dest Header is Missing [90005] total: 3:
- Sec-Fetch-Mode Header is Missing [90005] total: 3:
- Sec-Fetch-Site Header is Missing [90005] total: 3:
- Sec-Fetch-User Header is Missing [90005] total: 3:

View the following link to download the report. RunnerID:9187283525

github-actions[bot] commented 3 weeks ago

Site: https://get-into-teaching-app-development.test.teacherservices.cloud New Alerts
- Non-Storable Content [10049] total: 3:
- Sec-Fetch-Dest Header is Missing [90005] total: 3:
- Sec-Fetch-Mode Header is Missing [90005] total: 3:
- Sec-Fetch-Site Header is Missing [90005] total: 3:
- Sec-Fetch-User Header is Missing [90005] total: 3:
  Ignored Alerts
- Permissions Policy Header Not Set [10063] total: 3:

View the following link to download the report. RunnerID:9380216551

github-actions[bot] commented 1 week ago

Site: https://get-into-teaching-app-development.test.teacherservices.cloud Resolved Alerts
- Non-Storable Content [10049] total: 3:
- Sec-Fetch-Dest Header is Missing [90005] total: 3:
- Sec-Fetch-Mode Header is Missing [90005] total: 3:
- Sec-Fetch-Site Header is Missing [90005] total: 3:
- Sec-Fetch-User Header is Missing [90005] total: 3:

View the following link to download the report. RunnerID:9644466998