ZAP Full Scan Report - Githubissues

DFE-Digital / get-teacher-training-adviser-service

DFE-Digital Get Teacher Training Adviser Service

MIT License

2 stars 3 forks source link

ZAP Full Scan Report #118

Closed github-actions[bot] closed 4 years ago

github-actions[bot] commented 4 years ago

Site: https://get-teacher-training-adviser-service-dev.london.cloudapps.digital New Alerts
- Hidden File Found [40035] total: 20:
- Cookie Without SameSite Attribute [10054] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/
- X-Content-Type-Options Header Missing [10021] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/robots.txt
- Sub Resource Integrity Attribute Missing [90003] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/
- Non-Storable Content [10049] total: 4:
- Base64 Disclosure [10094] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/
- .htaccess Information Leak [40032] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/.htaccess
- Storable and Cacheable Content [10049] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/robots.txt
- .env Information Leak [40034] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/.env
- Cookie Without Secure Flag [10011] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/
- Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 2:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/robots.txt
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/
- Trace.axd Information Leak [40029] total: 1:
  - https://get-teacher-training-adviser-service-dev.london.cloudapps.digital/trace.axd
  Ignored Alerts
- Feature Policy Header Not Set [10063] total: 3:
- Content Security Policy (CSP) Header Not Set [10038] total: 3:

View the following link to download the report. RunnerID:186997661

github-actions[bot] commented 4 years ago

Site: https://get-teacher-training-adviser-service-dev.london.cloudapps.digital Resolved Alerts
- .htaccess Information Leak [40032] total: 1:
- .env Information Leak [40034] total: 1:
- Trace.axd Information Leak [40029] total: 1:

View the following link to download the report. RunnerID:195318115