ZAP Scan Baseline Report - Githubissues

P-Aspen / brokencrystalsDemo

A Broken Application - Very Vulnerable!

MIT License

0 stars 0 forks source link

ZAP Scan Baseline Report #1

Open github-actions[bot] opened 3 months ago

github-actions[bot] commented 3 months ago

Site: http://p-aspen.github.io New Alerts
- CSP: Wildcard Directive [10055] total: 4:
- CSP: style-src unsafe-inline [10055] total: 3:
- Base64 Disclosure [10094] total: 3:
- CSP: Header & Meta [10055] total: 3:
- Retrieved from Cache [10050] total: 4:
- Sec-Fetch-Dest Header is Missing [90005] total: 3:
- Sec-Fetch-Mode Header is Missing [90005] total: 3:
- Sec-Fetch-Site Header is Missing [90005] total: 3:
- Sec-Fetch-User Header is Missing [90005] total: 3:
- Storable and Cacheable Content [10049] total: 3:

View the following link to download the report. RunnerID:8572886980

github-actions[bot] commented 3 months ago

Site: http://p-aspen.github.io New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
  - http://p-aspen.github.io/brokencrystalsDemo/public/public
- Cross-Domain Misconfiguration [10098] total: 1:
  - http://p-aspen.github.io/brokencrystalsDemo/public/public
- Missing Anti-clickjacking Header [10020] total: 1:
  - http://p-aspen.github.io/brokencrystalsDemo/public/public
- Sub Resource Integrity Attribute Missing [90003] total: 15:
- X-Content-Type-Options Header Missing [10021] total: 1:
  - http://p-aspen.github.io/brokencrystalsDemo/public/public
- Information Disclosure - Suspicious Comments [10027] total: 2:
  - http://p-aspen.github.io/brokencrystalsDemo/public/public
  - http://p-aspen.github.io/brokencrystalsDemo/public/public
- Modern Web Application [10109] total: 1:
  - http://p-aspen.github.io/brokencrystalsDemo/public/public

View the following link to download the report. RunnerID:8588510116