ZAP Scan Baseline Report

Site: https://cdnjs.cloudflare.com
Site: https://preview.owasp-juice.shop New Alerts
- Missing Anti-clickjacking Header [10020] total: 12:
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P0T4-RQ&sid=fbBv058iszgzOZiQAADn
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P0T4_27&sid=Bjc8Ze-P2R2GDLvyAADp
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P0T4_jr&sid=STK96wTPoEaPZvhdAADt
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P0T4_V7&sid=gZ0q0t6wYLtH1HjPAADs
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P0T4_X2&sid=XnGvvTz92gMFVW0LAADr
  - ..
- Session ID in URL Rewrite [3] total: 12:
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P0T4uBF&sid=At6UCmkWf2gISvOgAADT
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P0T4vGX&sid=Gjq3q3NbtH4qT8VaAADY
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P0T4w-L&sid=Cu7D03be_OsUx0bCAADh
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P0T4wL3&sid=maJqc2bRzaMTjvY7AADc
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=websocket&sid=At6UCmkWf2gISvOgAADT
  - ..
- Private IP Disclosure [2] total: 1:
  - https://preview.owasp-juice.shop/rest/admin/application-configuration
- X-Content-Type-Options Header Missing [10021] total: 12:
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P0T4u7I
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P0T4uBF&sid=At6UCmkWf2gISvOgAADT
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P0T4vBT
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P0T4vGX&sid=Gjq3q3NbtH4qT8VaAADY
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P0T4w-L&sid=Cu7D03be_OsUx0bCAADh
  - ..
  Ignored Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 8:
- Cross-Domain Misconfiguration [10098] total: 10:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 6:
- Dangerous JS Functions [10110] total: 2:
- Deprecated Feature Policy Header Set [10063] total: 7:
- Permissions Policy Header Not Set [10063] total: 1:
- Strict-Transport-Security Header Not Set [10035] total: 10:
- Timestamp Disclosure - Unix [10096] total: 11:
- Base64 Disclosure [10094] total: 10:
- Information Disclosure - Suspicious Comments [10027] total: 2:
- Modern Web Application [10109] total: 3:
- Non-Storable Content [10049] total: 1:
- Re-examine Cache-control Directives [10015] total: 10:
- Sec-Fetch-Dest Header is Missing [90005] total: 3:
- Sec-Fetch-Mode Header is Missing [90005] total: 3:
- Sec-Fetch-Site Header is Missing [90005] total: 3:
- Sec-Fetch-User Header is Missing [90005] total: 3:
- Storable and Cacheable Content [10049] total: 1:
- Storable but Non-Cacheable Content [10049] total: 8:

View the following link to download the report. RunnerID:9529928372

This issue has been automatically marked as stale because it has not had recent activity. :calendar: It will be closed automatically in one week if no further activity occurs.

Site: https://cdnjs.cloudflare.com
Site: https://preview.owasp-juice.shop New Alerts
- Missing Anti-clickjacking Header [10020] total: 12:
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P29E2gt&sid=JTQq4b2JByfLwutWABtR
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P29E3cG&sid=5HbDWqp__m5YPJFeABtV
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P29E4Um&sid=JY1I_QTZz2u9qLBbABtZ
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P29E5Xv&sid=8xAJvrPBtj2t-qCWABtg
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P29E6n7&sid=TwK1vOXMZ9TwnuqmABtl
  - ..
- Session ID in URL Rewrite [3] total: 12:
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P29E2gv&sid=JTQq4b2JByfLwutWABtR
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P29E3cK&sid=5HbDWqp__m5YPJFeABtV
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P29E4Ut&sid=JY1I_QTZz2u9qLBbABtZ
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P29E5Xw&sid=8xAJvrPBtj2t-qCWABtg
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=websocket&sid=5HbDWqp__m5YPJFeABtV
  - ..
- Private IP Disclosure [2] total: 1:
  - https://preview.owasp-juice.shop/rest/admin/application-configuration
- X-Content-Type-Options Header Missing [10021] total: 12:
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P29E2dK
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P29E2gv&sid=JTQq4b2JByfLwutWABtR
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P29E3cK&sid=5HbDWqp__m5YPJFeABtV
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P29E3Yf
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P29E4OT
  - ..
  Ignored Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 8:
- Cross-Domain Misconfiguration [10098] total: 10:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 6:
- Dangerous JS Functions [10110] total: 2:
- Deprecated Feature Policy Header Set [10063] total: 7:
- Permissions Policy Header Not Set [10063] total: 1:
- Strict-Transport-Security Header Not Set [10035] total: 10:
- Timestamp Disclosure - Unix [10096] total: 11:
- Base64 Disclosure [10094] total: 12:
- Information Disclosure - Suspicious Comments [10027] total: 2:
- Modern Web Application [10109] total: 3:
- Non-Storable Content [10049] total: 1:
- Re-examine Cache-control Directives [10015] total: 10:
- Sec-Fetch-Dest Header is Missing [90005] total: 3:
- Sec-Fetch-Mode Header is Missing [90005] total: 3:
- Sec-Fetch-Site Header is Missing [90005] total: 3:
- Sec-Fetch-User Header is Missing [90005] total: 3:
- Storable and Cacheable Content [10049] total: 1:
- Storable but Non-Cacheable Content [10049] total: 8:

View the following link to download the report. RunnerID:9821134103

PixeeSandbox / juice-shop-defectdojo

ZAP Scan Baseline Report #5