ZAP Full Scan Report

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/documents/1/edit
    • http://localhost:3000/documents/new
    • http://localhost:3000/users
    • http://localhost:3000/documents/1
  • Application Error Disclosure [90022] total: 3:
    • http://localhost:3000/documents/1/edit
    • http://localhost:3000/documents/new
    • http://localhost:3000/documents/1
  • CSP: Notices [10055] total: 1:
    • http://localhost:3000/
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/assets/application-a831ca99188f3d61cba9c99b065c1e88eb9fe99068defbf3cf1811f534e9932e.js
    • http://localhost:3000/documents
    • http://localhost:3000/documents/1
    • http://localhost:3000/documents/1/edit
    • ..
  • Authentication Request Identified [10111] total: 3:
    • http://localhost:3000/users
    • http://localhost:3000/users
    • http://localhost:3000/users/sign_in
  • Information Disclosure - Suspicious Comments [10027] total: 2:
    • http://localhost:3000/assets/application-a831ca99188f3d61cba9c99b065c1e88eb9fe99068defbf3cf1811f534e9932e.js
    • http://localhost:3000/assets/application-a831ca99188f3d61cba9c99b065c1e88eb9fe99068defbf3cf1811f534e9932e.js
  • Loosely Scoped Cookie [90033] total: 12:
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/documents
    • http://localhost:3000/documents/1
    • http://localhost:3000/users/sign_in
    • ..
  • Non-Storable Content [10049] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/documents
    • http://localhost:3000/documents/1/edit
    • http://localhost:3000/documents/new
    • http://localhost:3000/users/sign_in
    • ..
  • Session Management Response Identified [10112] total: 12:
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/documents
    • http://localhost:3000/documents/1
    • http://localhost:3000/users/sign_in
    • ..
  • Storable and Cacheable Content [10049] total: 5:
    • http://localhost:3000/assets/@uswds/uswds/dist/img/icon-dot-gov-8edf00164f075d518fe954291d01344457ee2fc6b4e77ae76a5c632eb78516e8.svg
    • http://localhost:3000/assets/application-766b9d247b89db9e91f6af08f65c9f284fb396af7e3a19bfda6e54a0922dcdff.css
    • http://localhost:3000/assets/application-a831ca99188f3d61cba9c99b065c1e88eb9fe99068defbf3cf1811f534e9932e.js
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • User Agent Fuzzer [10104] total: 96:
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • ..

View the following link to download the report. RunnerID:11070326969

---

ZAP is supported by the Crash Override Open Source Fellowship

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Hidden File Found [40035] total: 3:
    • http://localhost:3000/._darcs
    • http://localhost:3000/.bzr
    • http://localhost:3000/.hg

View the following link to download the report. RunnerID:11384601545

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • SQL Injection - SQLite [40024] total: 1:
    • http://localhost:3000/es/users

View the following link to download the report. RunnerID:11517899440

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - SQLite [40024] total: 1:

View the following link to download the report. RunnerID:11531644744