github-actions[bot]
commented
2 years ago -
Site: https://devsecops-stage.hazy.beer New Alerts
- Strict-Transport-Security Header Not Set [10035] total: 11:
- https://devsecops-stage.hazy.beer/
- https://devsecops-stage.hazy.beer/?SearchString=ZAP
- https://devsecops-stage.hazy.beer/css/site.css
- https://devsecops-stage.hazy.beer/js/site.js?v=D4TFpxvZBRwxBiTkpn2L_q-zBuyBxK-Rvd7M1cA7jP4
- https://devsecops-stage.hazy.beer/lib/bootstrap/dist/css/bootstrap.min.css
- ..
- Cookie Slack Detector [90027] total: 17:
- Information Disclosure - Suspicious Comments [10027] total: 3:
- Modern Web Application [10109] total: 1:
- User Agent Fuzzer [10104] total: 64:
-
User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
Ignored Alerts
- CSP: script-src unsafe-inline [10055] total: 5:
- Vulnerable JS Library [10003] total: 1:
- Absence of Anti-CSRF Tokens [10202] total: 2:
- CSP: Notices [10055] total: 5:
- Cookie Without Secure Flag [10011] total: 1:
- Incomplete or No Cache-control Header Set [10015] total: 5:
- Timestamp Disclosure - Unix [10096] total: 1:
- Strict-Transport-Security Header Not Set [10035] total: 11:
View the following link to download the report. RunnerID:1883544768
Site: http://devsecops-stage.hazy.beer New Alerts
User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
Ignored Alerts
View the following link to download the report. RunnerID:1842013469