ZAP Full Scan Report - Githubissues

github-actions[bot] commented 4 years ago

Site: https://get-teacher-training-adviser-service-dev.london.cloudapps.digital New Alerts
- Hidden File Found [40035] total: 20:
- Cookie Without SameSite Attribute [10054] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/
- X-Content-Type-Options Header Missing [10021] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/robots.txt
- Sub Resource Integrity Attribute Missing [90003] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/
- Non-Storable Content [10049] total: 4:
- .htaccess Information Leak [40032] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/.htaccess
- Storable and Cacheable Content [10049] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/robots.txt
- .env Information Leak [40034] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/.env
- Cookie Without Secure Flag [10011] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/
- Base64 Disclosure [10094] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/
- Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 2:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/robots.txt
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/
- Trace.axd Information Leak [40029] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/trace.axd
  Ignored Alerts
- Feature Policy Header Not Set [10063] total: 3:
- Content Security Policy (CSP) Header Not Set [10038] total: 3:

View the following link to download the report. RunnerID:179708897

github-actions[bot] commented 4 years ago

Site: https://get-teacher-training-adviser-service-dev.london.cloudapps.digital Resolved Alerts
- Timestamp Disclosure - Unix [10096] total: 1:

View the following link to download the report. RunnerID:179708906

github-actions[bot] commented 4 years ago

Site: https://get-teacher-training-adviser-service-dev.london.cloudapps.digital New Alerts
- Timestamp Disclosure - Unix [10096] total: 2:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/sitemap.xml

View the following link to download the report. RunnerID:180006872

github-actions[bot] commented 4 years ago

Site: https://get-teacher-training-adviser-service-dev.london.cloudapps.digital Resolved Alerts
- Timestamp Disclosure - Unix [10096] total: 2:

View the following link to download the report. RunnerID:180889047

github-actions[bot] commented 4 years ago

Site: https://get-teacher-training-adviser-service-dev.london.cloudapps.digital New Alerts
- Timestamp Disclosure - Unix [10096] total: 3:

View the following link to download the report. RunnerID:180901483

github-actions[bot] commented 4 years ago

Site: https://get-teacher-training-adviser-service-dev.london.cloudapps.digital Resolved Alerts
- Timestamp Disclosure - Unix [10096] total: 3:

View the following link to download the report. RunnerID:181421395