ZAP Scan Baseline Report - Githubissues

GoF-NUS-ISS / travel-plan-ui

ui component code to be placed here.

Apache License 2.0

0 stars 0 forks source link

ZAP Scan Baseline Report #37

Open github-actions[bot] opened 3 years ago

github-actions[bot] commented 3 years ago

Site: http://alb-travel-app-451787435.us-east-1.elb.amazonaws.com:4200 New Alerts
- Cross-Domain Misconfiguration [10098] total: 11:
- X-Content-Type-Options Header Missing [10021] total: 9:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 11:
- Timestamp Disclosure - Unix [10096] total: 7:
- Information Disclosure - Suspicious Comments [10027] total: 5:
- Modern Web Application [10109] total: 3:
- CSP Scanner: Wildcard Directive [10055] total: 2:
  - http://alb-travel-app-451787435.us-east-1.elb.amazonaws.com:4200/sitemap.xml
  - http://alb-travel-app-451787435.us-east-1.elb.amazonaws.com:4200/robots.txt
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
  - http://alb-travel-app-451787435.us-east-1.elb.amazonaws.com:4200/
  - http://alb-travel-app-451787435.us-east-1.elb.amazonaws.com:4200
- X-Frame-Options Header Not Set [10020] total: 2:
  - http://alb-travel-app-451787435.us-east-1.elb.amazonaws.com:4200/
  - http://alb-travel-app-451787435.us-east-1.elb.amazonaws.com:4200

View the following link to download the report. RunnerID:317125946

github-actions[bot] commented 3 years ago

Site: http://alb-travel-app-451787435.us-east-1.elb.amazonaws.com:4200 Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 11:
- Timestamp Disclosure - Unix [10096] total: 7:
- Information Disclosure - Suspicious Comments [10027] total: 5:
- Modern Web Application [10109] total: 3:
- CSP Scanner: Wildcard Directive [10055] total: 2:

View the following link to download the report. RunnerID:321886605

github-actions[bot] commented 3 years ago

Site: http://alb-travel-app-451787435.us-east-1.elb.amazonaws.com:4200 New Alerts
- Cross-Domain Misconfiguration [10098] total: 11:
- Timestamp Disclosure - Unix [10096] total: 8:
- Information Disclosure - Suspicious Comments [10027] total: 5:
- Modern Web Application [10109] total: 3:
- CSP Scanner: Wildcard Directive [10055] total: 2:
  - http://alb-travel-app-451787435.us-east-1.elb.amazonaws.com:4200/sitemap.xml
  - http://alb-travel-app-451787435.us-east-1.elb.amazonaws.com:4200/robots.txt

View the following link to download the report. RunnerID:321987927

github-actions[bot] commented 3 years ago

Site: https://travel-plan-manager.com New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
  - https://travel-plan-manager.com
  - https://travel-plan-manager.com/
- Information Disclosure - Suspicious Comments [10027] total: 5:
- X-Content-Type-Options Header Missing [10021] total: 9:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 13:
- Cross-Domain Misconfiguration [10098] total: 13:
- CSP Scanner: Wildcard Directive [10055] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 13:
- Modern Web Application [10109] total: 3:
- Timestamp Disclosure - Unix [10096] total: 7:
- X-Frame-Options Header Not Set [10020] total: 2:
  - https://travel-plan-manager.com
  - https://travel-plan-manager.com/
- Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 3:

View the following link to download the report. RunnerID:328674752

github-actions[bot] commented 3 years ago

Site: https://travel-plan-manager.com New Alerts
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 6:
  Resolved Alerts
- Information Disclosure - Suspicious Comments [10027] total: 5:
- X-Content-Type-Options Header Missing [10021] total: 9:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 13:
- Cross-Domain Misconfiguration [10098] total: 13:
- CSP Scanner: Wildcard Directive [10055] total: 4:
- Modern Web Application [10109] total: 3:
- Timestamp Disclosure - Unix [10096] total: 7:
- X-Frame-Options Header Not Set [10020] total: 2:
- Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 3:

View the following link to download the report. RunnerID:335380273

github-actions[bot] commented 3 years ago

Site: https://travel-plan-manager.com New Alerts
- Information Disclosure - Suspicious Comments [10027] total: 5:
- X-Content-Type-Options Header Missing [10021] total: 9:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 13:
- Cross-Domain Misconfiguration [10098] total: 13:
- CSP Scanner: Wildcard Directive [10055] total: 4:
- Modern Web Application [10109] total: 3:
- Timestamp Disclosure - Unix [10096] total: 7:
- X-Frame-Options Header Not Set [10020] total: 2:
  - https://travel-plan-manager.com
  - https://travel-plan-manager.com/
- Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 3:
  Resolved Alerts
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 6:

View the following link to download the report. RunnerID:343336954