ZAP Full Scan Report

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • CSP: Notices [10055] total: 1:
    • http://localhost:3000/
  • Permissions Policy Header Not Set [10063] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/assets/application-3e32d8bed7a15ca0a9fdf78ce09c8a326e770773661cef7a70f55e2c79b8cb59.js
  • Information Disclosure - Suspicious Comments [10027] total: 2:
    • http://localhost:3000/assets/application-3e32d8bed7a15ca0a9fdf78ce09c8a326e770773661cef7a70f55e2c79b8cb59.js
    • http://localhost:3000/assets/application-3e32d8bed7a15ca0a9fdf78ce09c8a326e770773661cef7a70f55e2c79b8cb59.js
  • Loosely Scoped Cookie [90033] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/
  • Non-Storable Content [10049] total: 1:
    • http://localhost:3000/
  • Session Management Response Identified [10112] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/assets/@uswds/uswds/dist/img/usa-icons
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/assets/@uswds/uswds/dist/img/icon-dot-gov-8edf00164f075d518fe954291d01344457ee2fc6b4e77ae76a5c632eb78516e8.svg
    • http://localhost:3000/assets/@uswds/uswds/dist/img/icon-https-c9eb76304db98232bf59e2f0937e2125d228bfb3f3fdd9130800ad93ba376dfb.svg
    • http://localhost:3000/assets/@uswds/uswds/dist/img/us_flag_small-3d8e577eb632fcc0938557ec0dda2c1db1406345bd3bf25354c3de6168cfc665.png
    • http://localhost:3000/assets/@uswds/uswds/dist/img/usa-icons/close-ffbc61caf4be69eb734a7f3e93e96a4e2e3a163291b4ac04fc7c942dff396d27.svg
    • http://localhost:3000/assets/application-3e32d8bed7a15ca0a9fdf78ce09c8a326e770773661cef7a70f55e2c79b8cb59.js
    • ..
  • User Agent Fuzzer [10104] total: 24:
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • ..

View the following link to download the report. RunnerID:9712415510

---

ZAP is supported by the Crash Override Open Source Fellowship

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/documents/1/edit
    • http://localhost:3000/documents/new
    • http://localhost:3000/users
    • http://localhost:3000/documents/1
  • Application Error Disclosure [90022] total: 3:
    • http://localhost:3000/documents/1/edit
    • http://localhost:3000/documents/new
    • http://localhost:3000/documents/1
  • Authentication Request Identified [10111] total: 3:
    • http://localhost:3000/users
    • http://localhost:3000/users
    • http://localhost:3000/users/sign_in

View the following link to download the report. RunnerID:9723945759