ZAP Full Scan Report - Githubissues

github-actions[bot] commented 1 year ago

Site: https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 4:
- CSP: style-src unsafe-inline [10055] total: 4:
- Proxy Disclosure [40025] total: 35:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie Slack Detector [90027] total: 35:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 5:

View the following link to download the report. RunnerID:3228889270

github-actions[bot] commented 1 year ago

Site: https://dev.mychildcareservices.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 1:
  - https://dev.mychildcareservices.gov.bc.ca/error?message=404_Page_Not_Found
- CSP: style-src unsafe-inline [10055] total: 1:
  - https://dev.mychildcareservices.gov.bc.ca/error?message=404_Page_Not_Found
- Sub Resource Integrity Attribute Missing [90003] total: 2:
  - https://dev.mychildcareservices.gov.bc.ca/error?message=404_Page_Not_Found
  - https://dev.mychildcareservices.gov.bc.ca/error?message=404_Page_Not_Found
- Cookie with SameSite Attribute None [10054] total: 1:
  - https://dev.mychildcareservices.gov.bc.ca/error?message=404_Page_Not_Found
- Deprecated Feature Policy Header Set [10063] total: 1:
  - https://dev.mychildcareservices.gov.bc.ca/error?message=404_Page_Not_Found
- Modern Web Application [10109] total: 1:
  - https://dev.mychildcareservices.gov.bc.ca/error?message=404_Page_Not_Found
- Non-Storable Content [10049] total: 1:
  - https://dev.mychildcareservices.gov.bc.ca/error?message=404_Page_Not_Found
Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Proxy Disclosure [40025] total: 36:
- Sub Resource Integrity Attribute Missing [90003] total: 6:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://test.mychildcareservices.gov.bc.ca/
  - https://test.mychildcareservices.gov.bc.ca/api
- Cookie without SameSite Attribute [10054] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 11:
- Cookie Slack Detector [90027] total: 36:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 11:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:3465728588

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 4:
- Hidden File Found [40035] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 4:
  Resolved Alerts
- CSP: Wildcard Directive [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- Cross-Domain Misconfiguration [10098] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 6:
- Cookie with SameSite Attribute None [10054] total: 2:
- Cookie without SameSite Attribute [10054] total: 1:
- Cookie Slack Detector [90027] total: 36:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 4:

View the following link to download the report. RunnerID:3474546436

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 4:
- CSP: style-src unsafe-inline [10055] total: 4:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Sub Resource Integrity Attribute Missing [90003] total: 8:
- Cookie with SameSite Attribute None [10054] total: 4:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Cookie Slack Detector [90027] total: 42:
- Information Disclosure - Suspicious Comments [10027] total: 9:
- Modern Web Application [10109] total: 5:
  Resolved Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 4:
- Hidden File Found [40035] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 4:

View the following link to download the report. RunnerID:3518111651

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:3518164859

github-actions[bot] commented 1 year ago

Site: https://mychildcareservices.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 4:
- CSP: style-src unsafe-inline [10055] total: 4:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Proxy Disclosure [40025] total: 37:
- Sub Resource Integrity Attribute Missing [90003] total: 8:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Cookie Slack Detector [90027] total: 37:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 5:
- Non-Storable Content [10049] total: 12:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:3527486066

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 4:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Hidden File Found [40035] total: 4:
- Proxy Disclosure [40025] total: 6:
- Cookie with SameSite Attribute None [10054] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Cookie without SameSite Attribute [10054] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Permissions Policy Header Not Set [10063] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 4:
- Cookie Slack Detector [90027] total: 3:
- Non-Storable Content [10049] total: 5:
- User Agent Fuzzer [10104] total: 60:

View the following link to download the report. RunnerID:3715940823

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Sub Resource Integrity Attribute Missing [90003] total: 10:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Modern Web Application [10109] total: 7:
  Resolved Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 4:
- Cross-Domain Misconfiguration [10098] total: 1:
- Hidden File Found [40035] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 4:
- User Agent Fuzzer [10104] total: 60:

View the following link to download the report. RunnerID:3715942329

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 4:
- Hidden File Found [40035] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 4:
- User Agent Fuzzer [10104] total: 48:
  Resolved Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Sub Resource Integrity Attribute Missing [90003] total: 10:
- Cookie with SameSite Attribute None [10054] total: 2:
- Cookie Slack Detector [90027] total: 57:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Modern Web Application [10109] total: 7:

View the following link to download the report. RunnerID:3885546663

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- Backup File Disclosure [10095] total: 28:
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Sub Resource Integrity Attribute Missing [90003] total: 12:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Cookie Slack Detector [90027] total: 44:
- Information Disclosure - Suspicious Comments [10027] total: 9:
- Modern Web Application [10109] total: 6:
  Resolved Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 4:
- Hidden File Found [40035] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 4:

View the following link to download the report. RunnerID:3885544803

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca Resolved Alerts
- Backup File Disclosure [10095] total: 28:
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:3887515321

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/js/app~b88f4497.7ad56d53.js
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:3953683873

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:3953739336

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:3969751279

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:3969806774

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Hidden File Found [40035] total: 4:
- User Agent Fuzzer [10104] total: 252:

View the following link to download the report. RunnerID:3975911089

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- Hidden File Found [40035] total: 4:
- User Agent Fuzzer [10104] total: 252:

View the following link to download the report. RunnerID:3975922132

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:3980833398

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:3980869074

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- SQL Injection [40018] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/error?message=404_Page_Not_Found+AND+1%3D1+--+
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Hidden File Found [40035] total: 4:
- User Agent Fuzzer [10104] total: 98:

View the following link to download the report. RunnerID:3989899088

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca Resolved Alerts
- SQL Injection [40018] total: 1:
- Cross-Domain Misconfiguration [10098] total: 1:
- Hidden File Found [40035] total: 4:
- User Agent Fuzzer [10104] total: 98:

View the following link to download the report. RunnerID:3990009600

github-actions[bot] commented 1 year ago

Site: https://mychildcareservices.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 4:
- CSP: style-src unsafe-inline [10055] total: 4:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Proxy Disclosure [40025] total: 43:
- Sub Resource Integrity Attribute Missing [90003] total: 8:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Cookie Slack Detector [90027] total: 43:
- Information Disclosure - Suspicious Comments [10027] total: 9:
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 12:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:4001300598

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Proxy Disclosure [40025] total: 68:
- Sub Resource Integrity Attribute Missing [90003] total: 12:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/js/app~b88f4497.6406ed66.js
- Cookie Slack Detector [90027] total: 68:
- Information Disclosure - Suspicious Comments [10027] total: 13:
- Modern Web Application [10109] total: 6:
- Non-Storable Content [10049] total: 12:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:4027482310

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:4027526005

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Hidden File Found [40035] total: 4:
- User Agent Fuzzer [10104] total: 132:

View the following link to download the report. RunnerID:4047013399

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- Hidden File Found [40035] total: 4:
- User Agent Fuzzer [10104] total: 132:

View the following link to download the report. RunnerID:4047055102

github-actions[bot] commented 1 year ago

Site: https://mychildcareservices.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Hidden File Found [40035] total: 4:
- Proxy Disclosure [40025] total: 68:
- Sub Resource Integrity Attribute Missing [90003] total: 10:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://mychildcareservices.gov.bc.ca/js/app~b88f4497.6406ed66.js
- Cookie Slack Detector [90027] total: 68:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Modern Web Application [10109] total: 5:
- Non-Storable Content [10049] total: 12:
- User Agent Fuzzer [10104] total: 216:

View the following link to download the report. RunnerID:4048575831

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Hidden File Found [40035] total: 4:
- Proxy Disclosure [40025] total: 68:
- Sub Resource Integrity Attribute Missing [90003] total: 12:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 2:
  - https://test.mychildcareservices.gov.bc.ca/js/app~b88f4497.64c29b1a.js
  - https://test.mychildcareservices.gov.bc.ca/js/app~b88f4497.64c29b1a.js
- Cookie Slack Detector [90027] total: 68:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Modern Web Application [10109] total: 6:
- Non-Storable Content [10049] total: 12:
- User Agent Fuzzer [10104] total: 252:

View the following link to download the report. RunnerID:4108769653

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- Hidden File Found [40035] total: 4:
- User Agent Fuzzer [10104] total: 252:

View the following link to download the report. RunnerID:4108792166

github-actions[bot] commented 1 year ago

Site: https://mychildcareservices.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Hidden File Found [40035] total: 4:
- Proxy Disclosure [40025] total: 68:
- Sub Resource Integrity Attribute Missing [90003] total: 10:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 2:
  - https://mychildcareservices.gov.bc.ca/js/app~b88f4497.64c29b1a.js
  - https://mychildcareservices.gov.bc.ca/js/app~b88f4497.64c29b1a.js
- Cookie Slack Detector [90027] total: 68:
- Information Disclosure - Suspicious Comments [10027] total: 13:
- Modern Web Application [10109] total: 5:
- Non-Storable Content [10049] total: 12:
- User Agent Fuzzer [10104] total: 240:

View the following link to download the report. RunnerID:4129033252

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Proxy Disclosure [40025] total: 68:
- Sub Resource Integrity Attribute Missing [90003] total: 12:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 2:
  - https://test.mychildcareservices.gov.bc.ca/js/app~21833f8f.4b902f3e.js
  - https://test.mychildcareservices.gov.bc.ca/js/app~21833f8f.4b902f3e.js
- Cookie Slack Detector [90027] total: 68:
- Information Disclosure - Suspicious Comments [10027] total: 13:
- Modern Web Application [10109] total: 6:
- Non-Storable Content [10049] total: 12:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:4146455327

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:4146500246

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:4179267586

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- Hidden File Found [40035] total: 4:

View the following link to download the report. RunnerID:4189025790

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:4189060020

github-actions[bot] commented 1 year ago

Site: https://mychildcareservices.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Hidden File Found [40035] total: 4:
- Proxy Disclosure [40025] total: 68:
- Sub Resource Integrity Attribute Missing [90003] total: 10:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 2:
  - https://mychildcareservices.gov.bc.ca/js/app~21833f8f.4b902f3e.js
  - https://mychildcareservices.gov.bc.ca/js/app~21833f8f.4b902f3e.js
- Cookie Slack Detector [90027] total: 68:
- Information Disclosure - Suspicious Comments [10027] total: 13:
- Modern Web Application [10109] total: 5:
- Non-Storable Content [10049] total: 12:
- User Agent Fuzzer [10104] total: 96:

View the following link to download the report. RunnerID:4199352863

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- Hidden File Found [40035] total: 4:

View the following link to download the report. RunnerID:4246171504

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:4246201578

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:4248810764

github-actions[bot] commented 1 year ago

Site: https://mychildcareservices.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Hidden File Found [40035] total: 4:
- Proxy Disclosure [40025] total: 68:
- Sub Resource Integrity Attribute Missing [90003] total: 10:
- Cookie with SameSite Attribute None [10054] total: 5:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 2:
  - https://mychildcareservices.gov.bc.ca/js/app~21833f8f.4b902f3e.js
  - https://mychildcareservices.gov.bc.ca/js/app~21833f8f.4b902f3e.js
- Cookie Slack Detector [90027] total: 68:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Modern Web Application [10109] total: 5:
- Non-Storable Content [10049] total: 12:
- User Agent Fuzzer [10104] total: 216:

View the following link to download the report. RunnerID:4256651693

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:4297532925

github-actions[bot] commented 1 year ago

Site: https://mychildcareservices.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 4:
- CSP: style-src unsafe-inline [10055] total: 4:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Proxy Disclosure [40025] total: 66:
- Sub Resource Integrity Attribute Missing [90003] total: 8:
- Cookie with SameSite Attribute None [10054] total: 4:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 2:
  - https://mychildcareservices.gov.bc.ca/js/app~21833f8f.096a7455.js
  - https://mychildcareservices.gov.bc.ca/js/app~21833f8f.096a7455.js
- Cookie Slack Detector [90027] total: 66:
- Information Disclosure - Suspicious Comments [10027] total: 13:
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 13:
- User Agent Fuzzer [10104] total: 24:

View the following link to download the report. RunnerID:4298651539

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 4:
  Resolved Alerts
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Cross-Domain Misconfiguration [10098] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 12:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
- Timestamp Disclosure - Unix [10096] total: 2:
- Cookie Slack Detector [90027] total: 68:
- Information Disclosure - Suspicious Comments [10027] total: 13:
- Modern Web Application [10109] total: 6:

View the following link to download the report. RunnerID:4631906333

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- Backup File Disclosure [10095] total: 54:
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Strict-Transport-Security Header Not Set [10035] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
  Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:

View the following link to download the report. RunnerID:4631852830

github-actions[bot] commented 1 year ago

Site: https://mychildcareservices.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Proxy Disclosure [40025] total: 66:
- Sub Resource Integrity Attribute Missing [90003] total: 10:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 2:
  - https://mychildcareservices.gov.bc.ca/js/app~21833f8f.096a7455.js
  - https://mychildcareservices.gov.bc.ca/js/app~21833f8f.096a7455.js
- Cookie Slack Detector [90027] total: 66:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Modern Web Application [10109] total: 5:
- Non-Storable Content [10049] total: 13:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:4683352315

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 4:
  Resolved Alerts
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Cross-Domain Misconfiguration [10098] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 12:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
- Timestamp Disclosure - Unix [10096] total: 2:
- Cookie Slack Detector [90027] total: 68:
- Information Disclosure - Suspicious Comments [10027] total: 13:
- Modern Web Application [10109] total: 6:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:4802974310

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- Backup File Disclosure [10095] total: 38:

View the following link to download the report. RunnerID:4802930611

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 4:
  Resolved Alerts
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Cross-Domain Misconfiguration [10098] total: 1:
- Sub Resource Integrity Attribute Missing [90003] total: 12:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
- Timestamp Disclosure - Unix [10096] total: 2:
- Cookie Slack Detector [90027] total: 68:
- Information Disclosure - Suspicious Comments [10027] total: 13:
- Modern Web Application [10109] total: 6:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:4950831741

github-actions[bot] commented 1 year ago

Site: https://test.mychildcareservices.gov.bc.ca New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Strict-Transport-Security Header Not Set [10035] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
  Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:

View the following link to download the report. RunnerID:4950770991

bcgov / EDUC-CCOF

ZAP Full Scan Report #45