ZAP Scan Baseline Report

[github-actions[bot]]

• Site: https://cdnjs.cloudflare.com

• Site: https://preview.owasp-juice.shop New Alerts

  • Missing Anti-clickjacking Header [10020] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=O-CuIML&sid=I08_sQWP8NBIzLK3AAEG
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=O-CuJDY&sid=00uQHjwtlPzCTBxdAAEK
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=O-CuKFD&sid=43tXt3XkcUn3_5WTAAEM
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=O-CuLG8&sid=ELBrxuePwA8GyLj6AAER
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=O-CuMkJ&sid=RS-r8C8IDea2ATGwAAEY
    • ..
  • Session ID in URL Rewrite [3] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=O-CuIMN&sid=I08_sQWP8NBIzLK3AAEG
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=O-CuJDZ&sid=00uQHjwtlPzCTBxdAAEK
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=O-CuKFF&sid=43tXt3XkcUn3_5WTAAEM
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=O-CuLGJ&sid=ELBrxuePwA8GyLj6AAER
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=websocket&sid=00uQHjwtlPzCTBxdAAEK
    • ..
  • Private IP Disclosure [2] total: 1:
    • https://preview.owasp-juice.shop/rest/admin/application-configuration

  • X-Content-Type-Options Header Missing [10021] total: 12:

    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=O-CuIJO
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=O-CuIMN&sid=I08_sQWP8NBIzLK3AAEG
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=O-CuJ9Z
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=O-CuJDZ&sid=00uQHjwtlPzCTBxdAAEK
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=O-CuK6w
    • ..

    Ignored Alerts

  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
  • Cross-Domain Misconfiguration [10098] total: 10:
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 6:
  • Dangerous JS Functions [10110] total: 2:
  • Deprecated Feature Policy Header Set [10063] total: 7:
  • Permissions Policy Header Not Set [10063] total: 1:
  • Strict-Transport-Security Header Not Set [10035] total: 10:
  • Timestamp Disclosure - Unix [10096] total: 10:
  • Base64 Disclosure [10094] total: 11:
  • Information Disclosure - Suspicious Comments [10027] total: 2:
  • Modern Web Application [10109] total: 3:
  • Non-Storable Content [10049] total: 1:
  • Re-examine Cache-control Directives [10015] total: 8:
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
  • Sec-Fetch-User Header is Missing [90005] total: 3:
  • Storable and Cacheable Content [10049] total: 1:
  • Storable but Non-Cacheable Content [10049] total: 9:

View the following link to download the report. RunnerID:9141696759

[github-actions[bot]]

This issue has been automatically marked as stale because it has not had recent activity. :calendar: It will be closed automatically in one week if no further activity occurs.

[github-actions[bot]]

This issue was closed because it has been stalled for 7 days with no activity.