Streaming Services ZAP Scan

[github-actions[bot]]

• Site: https://content-signature-2.cdn.mozilla.net New Alerts

  • Unexpected Content-Type was returned [100001] total: 1:
    • https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-09-19-18-34-07.chain

• Site: https://api.epa.gov New Alerts

  • Cross-Domain Misconfiguration [10098] total: 6:
    • https://api.epa.gov/easey/dev/streaming-services/accounts/attributes?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=accountType
    • https://api.epa.gov/easey/dev/streaming-services/allowance-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&year=1.2&exclude=allocated
    • https://api.epa.gov/easey/dev/streaming-services/allowance-holdings?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&vintageYear=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=epaRegion
    • https://api.epa.gov/easey/dev/streaming-services/allowance-transactions?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&programCodeInfo=ARP&ownerOperator=ownerOperator&transactionBeginDate=transactionBeginDate&transactionEndDate=transactionEndDate&transactionType=Activate%20Conditional%20Allowances&vintageYear=1.2&exclude=buyAccountType
    • https://api.epa.gov/easey/dev/streaming-services/emissions-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&year=1.2&exclude=ownerOperator
    • ..
  • Timestamp Disclosure - Unix [10096] total: 2:
    • https://api.epa.gov/easey/dev/streaming-services/emissions/apportioned/annual?stateCode=AL&facilityId=1.2&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&programCodeInfo=ARP&year=1.2&exclude=co2Rate
    • https://api.epa.gov/easey/dev/streaming-services/emissions/apportioned/ozone/by-facility?stateCode=AL&facilityId=1.2&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&programCodeInfo=ARP&year=1.2
  • A Client Error response code was returned by the server [100000] total: 31:
    • https://api.epa.gov/easey/dev/streaming-services/accounts/attributes?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=accountType
    • https://api.epa.gov/easey/dev/streaming-services/allowance-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&year=1.2&exclude=allocated
    • https://api.epa.gov/easey/dev/streaming-services/allowance-holdings?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&vintageYear=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=epaRegion
    • https://api.epa.gov/easey/dev/streaming-services/allowance-transactions?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&programCodeInfo=ARP&ownerOperator=ownerOperator&transactionBeginDate=transactionBeginDate&transactionEndDate=transactionEndDate&transactionType=Activate%20Conditional%20Allowances&vintageYear=1.2&exclude=buyAccountType
    • https://api.epa.gov/easey/dev/streaming-services/emissions-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&year=1.2&exclude=ownerOperator
    • ..
  • Non-Storable Content [10049] total: 6:
    • https://api.epa.gov/easey/dev/streaming-services/accounts/attributes?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=accountType
    • https://api.epa.gov/easey/dev/streaming-services/allowance-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&year=1.2&exclude=allocated
    • https://api.epa.gov/easey/dev/streaming-services/allowance-holdings?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&vintageYear=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=epaRegion
    • https://api.epa.gov/easey/dev/streaming-services/allowance-transactions?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&programCodeInfo=ARP&ownerOperator=ownerOperator&transactionBeginDate=transactionBeginDate&transactionEndDate=transactionEndDate&transactionType=Activate%20Conditional%20Allowances&vintageYear=1.2&exclude=buyAccountType
    • https://api.epa.gov/easey/dev/streaming-services/emissions-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&year=1.2&exclude=ownerOperator
    • ..

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 10:
    • https://api-easey-dev.app.cloud.gov
    • https://api-easey-dev.app.cloud.gov/
    • https://api-easey-dev.app.cloud.gov/.htaccess
    • https://api-easey-dev.app.cloud.gov/7842074113577895390
    • https://api-easey-dev.app.cloud.gov/?name=abc
    • ..
  • A Client Error response code was returned by the server [100000] total: 14:
    • https://api-easey-dev.app.cloud.gov
    • https://api-easey-dev.app.cloud.gov/
    • https://api-easey-dev.app.cloud.gov/.htaccess
    • https://api-easey-dev.app.cloud.gov/7842074113577895390
    • https://api-easey-dev.app.cloud.gov/?name=abc
    • ..
  • Non-Storable Content [10049] total: 1:
    • https://api-easey-dev.app.cloud.gov/streaming-services/swagger-json

View the following link to download the report. RunnerID:2893854805

[github-actions[bot]]

• Site: https://content-signature-2.cdn.mozilla.net

• Site: https://content-signature-2.cdn.mozilla.net

• Site: https://api.epa.gov Resolved Alerts

  • Timestamp Disclosure - Unix [10096] total: 2:

• Site: https://api-easey-dev.app.cloud.gov

View the following link to download the report. RunnerID:2938350199

[github-actions[bot]]

• Site: https://api.epa.gov New Alerts

  • Application Error Disclosure [90022] total: 1:
    • https://api.epa.gov/easey/dev/streaming-services/emissions/apportioned/quarterly?stateCode=AL&facilityId=1.2&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&programCodeInfo=ARP&year=1.2&quarter=1.2&exclude=co2Rate
  • Information Disclosure - Debug Error Messages [10023] total: 1:
    • https://api.epa.gov/easey/dev/streaming-services/emissions/apportioned/quarterly?stateCode=AL&facilityId=1.2&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&programCodeInfo=ARP&year=1.2&quarter=1.2&exclude=co2Rate
  • Strict-Transport-Security Multiple Header Entries (Non-compliant with Spec) [10035] total: 6:
    • https://api.epa.gov/easey/dev/streaming-services/accounts/attributes?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=accountType
    • https://api.epa.gov/easey/dev/streaming-services/allowance-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&year=1.2&exclude=allocated
    • https://api.epa.gov/easey/dev/streaming-services/allowance-holdings?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&vintageYear=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=epaRegion
    • https://api.epa.gov/easey/dev/streaming-services/allowance-transactions?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&programCodeInfo=ARP&ownerOperator=ownerOperator&transactionBeginDate=transactionBeginDate&transactionEndDate=transactionEndDate&transactionType=Activate%20Conditional%20Allowances&vintageYear=1.2&exclude=buyAccountType
    • https://api.epa.gov/easey/dev/streaming-services/emissions-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&year=1.2&exclude=ownerOperator
    • ..
  • Timestamp Disclosure - Unix [10096] total: 3:
    • https://api.epa.gov/easey/dev/streaming-services/allowance-transactions?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&programCodeInfo=ARP&ownerOperator=ownerOperator&transactionBeginDate=transactionBeginDate&transactionEndDate=transactionEndDate&transactionType=Activate%20Conditional%20Allowances&vintageYear=1.2&exclude=buyAccountType
    • https://api.epa.gov/easey/dev/streaming-services/emissions/apportioned/daily/by-state?stateCode=AL&facilityId=1.2&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&programCodeInfo=ARP&beginDate=beginDate&endDate=endDate
    • https://api.epa.gov/easey/dev/streaming-services/emissions/apportioned/monthly/by-facility?stateCode=AL&facilityId=1.2&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&programCodeInfo=ARP&year=1.2&month=1.2
  • Base64 Disclosure [10094] total: 6:
    • https://api.epa.gov/easey/dev/streaming-services/accounts/attributes?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=accountType
    • https://api.epa.gov/easey/dev/streaming-services/allowance-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&year=1.2&exclude=allocated
    • https://api.epa.gov/easey/dev/streaming-services/allowance-holdings?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&vintageYear=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=epaRegion
    • https://api.epa.gov/easey/dev/streaming-services/allowance-transactions?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&programCodeInfo=ARP&ownerOperator=ownerOperator&transactionBeginDate=transactionBeginDate&transactionEndDate=transactionEndDate&transactionType=Activate%20Conditional%20Allowances&vintageYear=1.2&exclude=buyAccountType
    • https://api.epa.gov/easey/dev/streaming-services/emissions-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&year=1.2&exclude=ownerOperator
    • ..

  • Retrieved from Cache [10050] total: 6:

    • https://api.epa.gov/easey/dev/streaming-services/accounts/attributes?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=accountType
    • https://api.epa.gov/easey/dev/streaming-services/allowance-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&year=1.2&exclude=allocated
    • https://api.epa.gov/easey/dev/streaming-services/allowance-holdings?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&vintageYear=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=epaRegion
    • https://api.epa.gov/easey/dev/streaming-services/allowance-transactions?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&programCodeInfo=ARP&ownerOperator=ownerOperator&transactionBeginDate=transactionBeginDate&transactionEndDate=transactionEndDate&transactionType=Activate%20Conditional%20Allowances&vintageYear=1.2&exclude=buyAccountType
    • https://api.epa.gov/easey/dev/streaming-services/emissions-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&year=1.2&exclude=ownerOperator
    • ..

    Resolved Alerts

  • Cross-Domain Misconfiguration [10098] total: 6:

• Site: https://api-easey-dev.app.cloud.gov

View the following link to download the report. RunnerID:2983499107

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Timestamp Disclosure - Unix [10096] total: 3:

• Site: https://api-easey-dev.app.cloud.gov Resolved Alerts

  • Unexpected Content-Type was returned [100001] total: 5:

View the following link to download the report. RunnerID:3027066716

[github-actions[bot]]

• Site: https://api.epa.gov Resolved Alerts

  • Base64 Disclosure [10094] total: 6:

• Site: https://api-easey-dev.app.cloud.gov

View the following link to download the report. RunnerID:3072460114

[github-actions[bot]]

• Site: https://api.epa.gov

• Site: https://api-easey-dev.app.cloud.gov New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:
    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini

View the following link to download the report. RunnerID:3350463512