OWASP Full - Githubissues

bcgov / AppAssessment

Components to automate the delivery of the App Assessment tool

Apache License 2.0

7 stars 3 forks source link

OWASP Full #14

Open github-actions[bot] opened 3 years ago

github-actions[bot] commented 3 years ago

Site: https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- Proxy Disclosure [40025] total: 4:
- X-Frame-Options Header Not Set [10020] total: 1:
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/robots.txt
- In Page Banner Information Leak [10009] total: 2:
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/robots.txt
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/sitemap.xml
- Incomplete or No Cache-control Header Set [10015] total: 1:
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/
- Permissions Policy Header Not Set [10063] total: 3:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 3:
- Strict-Transport-Security Header Not Set [10035] total: 3:
- X-Content-Type-Options Header Missing [10021] total: 1:
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/
- Cookie Slack Detector [90027] total: 4:
- Non-Storable Content [10049] total: 2:
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/robots.txt
- Storable and Cacheable Content [10049] total: 1:
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/sitemap.xml
- User Agent Fuzzer [10104] total: 6:

View the following link to download the report. RunnerID:1365400745