ZAP Scan Baseline Report - Githubissues

USEPA / revampd

Basic tutorial for the EPA Clean Air Markets Division to go through the process of creating a small web app, in the problem space of AMPD, with automated tests and deployment to cloud.gov at https://revampd.app.cloud.gov

Other

2 stars 1 forks source link

ZAP Scan Baseline Report #77

Open github-actions[bot] opened 3 years ago

github-actions[bot] commented 3 years ago

Site: http://localhost:9080 New Alerts
- Cross-Domain Misconfiguration [10098] total: 10:
- Modern Web Application [10109] total: 5:
- Timestamp Disclosure - Unix [10096] total: 20:
- X-Content-Type-Options Header Missing [10021] total: 10:
- Content Security Policy (CSP) Header Not Set [10038] total: 7:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 11:
- Information Disclosure - Suspicious Comments [10027] total: 8:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 6:
- Private IP Disclosure [2] total: 1:
  - http://localhost:9080/swaggerUI/swagger-ui-bundle.js
- Absence of Anti-CSRF Tokens [10202] total: 2:
  - http://localhost:9080/
  - http://localhost:9080
- HTTP to HTTPS Insecure Transition in Form Post [10041] total: 2:
  - http://localhost:9080/
  - http://localhost:9080
- X-Frame-Options Header Not Set [10020] total: 3:

View the following link to download the report. RunnerID:528807607

github-actions[bot] commented 3 years ago

Site: http://localhost:9080 Resolved Alerts
- Private IP Disclosure [2] total: 1:

View the following link to download the report. RunnerID:528909719

github-actions[bot] commented 3 years ago

Site: http://localhost:9080 New Alerts
- Private IP Disclosure [2] total: 1:
  - http://localhost:9080/swaggerUI/swagger-ui-bundle.js

View the following link to download the report. RunnerID:538100073