ZAP Scan Baseline Report

Site: https://cdnjs.cloudflare.com
Site: https://preview.owasp-juice.shop New Alerts
- Missing Anti-clickjacking Header [10020] total: 12:
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8VqnL&sid=bUdsVpy_Rjc6zkjtAAM7
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8Vrjm&sid=GYFdFcb5MtPOUwWCAANC
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8VsZK&sid=Gg8fGnd6aD1Cw-YlAANH
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8VtZO&sid=6DXKYCDUxbqWJxHRAANT
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8Vuig&sid=rb3cguPKyowBGu-9AANg
  - ..
- Session ID in URL Rewrite [3] total: 12:
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8VqnM&sid=bUdsVpy_Rjc6zkjtAAM7
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8Vrjn&sid=GYFdFcb5MtPOUwWCAANC
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8VsZR&sid=Gg8fGnd6aD1Cw-YlAANH
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8VtZQ&sid=6DXKYCDUxbqWJxHRAANT
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=websocket&sid=6DXKYCDUxbqWJxHRAANT
  - ..
- Application Error Disclosure [90022] total: 1:
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8W2qj&sid=cv-mQiWS2rtDFVLgAAOo
- Private IP Disclosure [2] total: 1:
  - https://preview.owasp-juice.shop/rest/admin/application-configuration
- X-Content-Type-Options Header Missing [10021] total: 12:
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8VqiA
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8VqnM&sid=bUdsVpy_Rjc6zkjtAAM7
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8VrfT
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8Vrjn&sid=GYFdFcb5MtPOUwWCAANC
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8VsQq
  - ..
  Ignored Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 8:
- Cross-Domain Misconfiguration [10098] total: 10:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 6:
- Dangerous JS Functions [10110] total: 2:
- Deprecated Feature Policy Header Set [10063] total: 7:
- Permissions Policy Header Not Set [10063] total: 1:
- Strict-Transport-Security Header Not Set [10035] total: 10:
- Timestamp Disclosure - Unix [10096] total: 11:
- Base64 Disclosure [10094] total: 12:
- Information Disclosure - Suspicious Comments [10027] total: 2:
- Modern Web Application [10109] total: 3:
- Non-Storable Content [10049] total: 1:
- Re-examine Cache-control Directives [10015] total: 9:
- Sec-Fetch-Dest Header is Missing [90005] total: 3:
- Sec-Fetch-Mode Header is Missing [90005] total: 3:
- Sec-Fetch-Site Header is Missing [90005] total: 3:
- Sec-Fetch-User Header is Missing [90005] total: 3:
- Storable and Cacheable Content [10049] total: 1:
- Storable but Non-Cacheable Content [10049] total: 8:

View the following link to download the report. RunnerID:8309639260

Site: https://cdnjs.cloudflare.com
Site: https://preview.owasp-juice.shop Resolved Alerts
- Application Error Disclosure [90022] total: 1:

View the following link to download the report. RunnerID:8492584128

This issue has been automatically marked as stale because it has not had recent activity. :calendar: It will be closed automatically in one week if no further activity occurs.

Site: https://cdnjs.cloudflare.com
Site: https://preview.owasp-juice.shop New Alerts
- Missing Anti-clickjacking Header [10020] total: 12:
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OxylN4f&sid=w2lVFghtIz0oYfjsAANv
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OxylO3Z&sid=Rduw3B8xCBO4TCggAANx
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OxylO_r&sid=8NufCKAaWIKjvA9xAANz
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OxylPzK&sid=_lLaN12HmvTkpOk0AAN1
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OxylRAi&sid=15bIvJ9PFDTNEw2qAAN4
  - ..
- Session ID in URL Rewrite [3] total: 12:
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OxylN4g&sid=w2lVFghtIz0oYfjsAANv
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OxylO3b&sid=Rduw3B8xCBO4TCggAANx
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OxylO_t&sid=8NufCKAaWIKjvA9xAANz
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OxylPzh&sid=_lLaN12HmvTkpOk0AAN1
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=websocket&sid=8NufCKAaWIKjvA9xAANz
  - ..
- Application Error Disclosure [90022] total: 1:
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OxylbCu&sid=hgXdzwddG-4PXNE3AAO2
- Private IP Disclosure [2] total: 1:
  - https://preview.owasp-juice.shop/rest/admin/application-configuration
- X-Content-Type-Options Header Missing [10021] total: 12:
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OxylN1t
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OxylN4g&sid=w2lVFghtIz0oYfjsAANv
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OxylNzK
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OxylO3b&sid=Rduw3B8xCBO4TCggAANx
  - https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OxylO_t&sid=8NufCKAaWIKjvA9xAANz
  - ..
  Ignored Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 8:
- Cross-Domain Misconfiguration [10098] total: 10:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 6:
- Dangerous JS Functions [10110] total: 2:
- Deprecated Feature Policy Header Set [10063] total: 7:
- Permissions Policy Header Not Set [10063] total: 1:
- Strict-Transport-Security Header Not Set [10035] total: 10:
- Timestamp Disclosure - Unix [10096] total: 10:
- Base64 Disclosure [10094] total: 11:
- Information Disclosure - Suspicious Comments [10027] total: 2:
- Modern Web Application [10109] total: 3:
- Non-Storable Content [10049] total: 1:
- Re-examine Cache-control Directives [10015] total: 7:
- Sec-Fetch-Dest Header is Missing [90005] total: 3:
- Sec-Fetch-Mode Header is Missing [90005] total: 3:
- Sec-Fetch-Site Header is Missing [90005] total: 3:
- Sec-Fetch-User Header is Missing [90005] total: 3:
- Storable and Cacheable Content [10049] total: 1:
- Storable but Non-Cacheable Content [10049] total: 8:

View the following link to download the report. RunnerID:8766923195

Site: https://cdnjs.cloudflare.com
Site: https://preview.owasp-juice.shop Resolved Alerts
- Application Error Disclosure [90022] total: 1:

View the following link to download the report. RunnerID:8861745389

This issue has been automatically marked as stale because it has not had recent activity. :calendar: It will be closed automatically in one week if no further activity occurs.

RinkuDas7857 / Testing-owsap

ZAP Scan Baseline Report #1