ZAP Full Scan Report - Githubissues

github-actions[bot] commented 9 months ago

Site: https://educ-sdci-de4e16-test.apps.silver.devops.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- Proxy Disclosure [40025] total: 8:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://educ-sdci-de4e16-test.apps.silver.devops.gov.bc.ca
  - https://educ-sdci-de4e16-test.apps.silver.devops.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 4:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://educ-sdci-de4e16-test.apps.silver.devops.gov.bc.ca/assets/index-58615ec9.css
- Cookie Slack Detector [90027] total: 8:
- Information Disclosure - Suspicious Comments [10027] total: 5:
- Modern Web Application [10109] total: 3:
- Non-Storable Content [10049] total: 7:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:6279029437

github-actions[bot] commented 7 months ago

Site: https://bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 7:
- CSP: style-src unsafe-inline [10055] total: 7:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://bcschoolcontacts.gov.bc.ca
  - https://bcschoolcontacts.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:7120581014

github-actions[bot] commented 7 months ago

Site: https://dev.bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 4:
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://dev.bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 5:

View the following link to download the report. RunnerID:7133354553

github-actions[bot] commented 7 months ago

Site: https://dev.bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://dev.bcschoolcontacts.gov.bc.ca
  - https://dev.bcschoolcontacts.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://dev.bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:7137765258

github-actions[bot] commented 7 months ago

Site: https://test.bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://test.bcschoolcontacts.gov.bc.ca
  - https://test.bcschoolcontacts.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://test.bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:7137802758

github-actions[bot] commented 7 months ago

Site: https://dev.bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://dev.bcschoolcontacts.gov.bc.ca
  - https://dev.bcschoolcontacts.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://dev.bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:7146023338

github-actions[bot] commented 7 months ago

Site: https://test.bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://test.bcschoolcontacts.gov.bc.ca
  - https://test.bcschoolcontacts.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://test.bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:7146129779

github-actions[bot] commented 6 months ago

Site: https://bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://bcschoolcontacts.gov.bc.ca
  - https://bcschoolcontacts.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:7171144252

github-actions[bot] commented 6 months ago

Site: https://dev.bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 7:
- CSP: style-src unsafe-inline [10055] total: 7:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://dev.bcschoolcontacts.gov.bc.ca
  - https://dev.bcschoolcontacts.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://dev.bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:7200472085

github-actions[bot] commented 6 months ago

Site: https://dev.bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://dev.bcschoolcontacts.gov.bc.ca
  - https://dev.bcschoolcontacts.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://dev.bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:7265423934

github-actions[bot] commented 6 months ago

Site: https://dev.bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://dev.bcschoolcontacts.gov.bc.ca
  - https://dev.bcschoolcontacts.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://dev.bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:7268302476

github-actions[bot] commented 6 months ago

Site: https://dev.bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://dev.bcschoolcontacts.gov.bc.ca/
  - https://dev.bcschoolcontacts.gov.bc.ca/robots.txt
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://dev.bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:7268395421

github-actions[bot] commented 6 months ago

Site: https://dev.bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 7:
- CSP: style-src unsafe-inline [10055] total: 7:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://dev.bcschoolcontacts.gov.bc.ca
  - https://dev.bcschoolcontacts.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://dev.bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:7280100316

github-actions[bot] commented 6 months ago

Site: https://test.bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://test.bcschoolcontacts.gov.bc.ca
  - https://test.bcschoolcontacts.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://test.bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:7280707866

github-actions[bot] commented 6 months ago

Site: https://dev.bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://dev.bcschoolcontacts.gov.bc.ca
  - https://dev.bcschoolcontacts.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://dev.bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:7291250103

github-actions[bot] commented 6 months ago

Site: https://dev.bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://dev.bcschoolcontacts.gov.bc.ca
  - https://dev.bcschoolcontacts.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://dev.bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:7389438236

github-actions[bot] commented 6 months ago

Site: https://dev.bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://dev.bcschoolcontacts.gov.bc.ca
  - https://dev.bcschoolcontacts.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://dev.bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:7412934698

github-actions[bot] commented 6 months ago

Site: https://dev.bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://dev.bcschoolcontacts.gov.bc.ca
  - https://dev.bcschoolcontacts.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://dev.bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:7416302717

github-actions[bot] commented 6 months ago

Site: https://dev.bcschoolcontacts.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Proxy Disclosure [40025] total: 16:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://dev.bcschoolcontacts.gov.bc.ca
  - https://dev.bcschoolcontacts.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://dev.bcschoolcontacts.gov.bc.ca/assets/index-1a3c724c.css
- Cookie Slack Detector [90027] total: 16:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 7:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:7451779372