OWASP Baseline - Frontend

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 3:
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/set/csr
  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/robots.txt
    • http://localhost:3000/set/csr
    • ..
  • Missing Anti-clickjacking Header [10020] total: 5:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/set/csr
    • http://localhost:3000/set/ssr
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/pages/_error-c92d5c4bb2b49926.js
    • http://localhost:3000/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js
    • http://localhost:3000/_next/static/chunks/webpack-f01ca3821e292aec.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/robots.txt
    • http://localhost:3000/set/csr
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • http://localhost:3000/_next/static/chunks/pages/_app-52924524f99094ab.js
    • http://localhost:3000/_next/static/chunks/pages/_error-c92d5c4bb2b49926.js
    • ..
  • Authentication Request Identified [10111] total: 1:
    • http://localhost:3000/
  • Base64 Disclosure [10094] total: 3:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • http://localhost:3000/_next/static/chunks/596-576ee912800c8120.js
    • http://localhost:3000/_next/static/chunks/596-576ee912800c8120.js
    • http://localhost:3000/_next/static/chunks/fd9d1056-d8f5e6ec3ff59217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • ..
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/pages/_error-c92d5c4bb2b49926.js
    • http://localhost:3000/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js
    • http://localhost:3000/_next/static/chunks/webpack-f01ca3821e292aec.js
    • ..

View the following link to download the report. RunnerID:6321367123

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 3:
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/set/csr
  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/robots.txt
    • http://localhost:3000/set/csr
    • ..
  • Missing Anti-clickjacking Header [10020] total: 5:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/set/csr
    • http://localhost:3000/set/ssr
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/pages/_error-c92d5c4bb2b49926.js
    • http://localhost:3000/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js
    • http://localhost:3000/_next/static/chunks/webpack-f01ca3821e292aec.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/robots.txt
    • http://localhost:3000/set/csr
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • http://localhost:3000/_next/static/chunks/pages/_app-52924524f99094ab.js
    • http://localhost:3000/_next/static/chunks/pages/_error-c92d5c4bb2b49926.js
    • ..
  • Authentication Request Identified [10111] total: 1:
    • http://localhost:3000/
  • Base64 Disclosure [10094] total: 3:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • http://localhost:3000/_next/static/chunks/596-576ee912800c8120.js
    • http://localhost:3000/_next/static/chunks/596-576ee912800c8120.js
    • http://localhost:3000/_next/static/chunks/fd9d1056-d8f5e6ec3ff59217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • ..
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/pages/_error-c92d5c4bb2b49926.js
    • http://localhost:3000/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js
    • http://localhost:3000/_next/static/chunks/webpack-f01ca3821e292aec.js
    • ..

View the following link to download the report. RunnerID:6321701992

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 3:
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/set/csr
  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/robots.txt
    • http://localhost:3000/set/csr
    • ..
  • Missing Anti-clickjacking Header [10020] total: 5:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/set/csr
    • http://localhost:3000/set/ssr
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • http://localhost:3000/_next/static/chunks/pages/_app-52924524f99094ab.js
    • http://localhost:3000/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js
    • http://localhost:3000/_next/static/chunks/webpack-f01ca3821e292aec.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/robots.txt
    • http://localhost:3000/set/csr
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • http://localhost:3000/_next/static/chunks/pages/_app-52924524f99094ab.js
    • http://localhost:3000/_next/static/chunks/pages/_error-c92d5c4bb2b49926.js
    • http://localhost:3000/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js
    • ..
  • Authentication Request Identified [10111] total: 1:
    • http://localhost:3000/
  • Base64 Disclosure [10094] total: 3:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • http://localhost:3000/_next/static/chunks/596-576ee912800c8120.js
    • http://localhost:3000/_next/static/chunks/596-576ee912800c8120.js
    • http://localhost:3000/_next/static/chunks/fd9d1056-d8f5e6ec3ff59217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • ..
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • http://localhost:3000/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js
    • http://localhost:3000/_next/static/chunks/webpack-f01ca3821e292aec.js
    • http://localhost:3000/_next/static/css/b6d797271503e28a.css
    • ..

View the following link to download the report. RunnerID:6328548857

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 3:
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/set/csr
  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/robots.txt
    • http://localhost:3000/set/csr
    • ..
  • Missing Anti-clickjacking Header [10020] total: 5:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/set/csr
    • http://localhost:3000/set/ssr
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • http://localhost:3000/_next/static/chunks/pages/_app-52924524f99094ab.js
    • http://localhost:3000/_next/static/chunks/pages/_error-c92d5c4bb2b49926.js
    • http://localhost:3000/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/robots.txt
    • http://localhost:3000/set/csr
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/-G_CTCfaMmRHMZXsKWg2L/_buildManifest.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • http://localhost:3000/_next/static/chunks/pages/_app-52924524f99094ab.js
    • http://localhost:3000/_next/static/chunks/pages/_error-c92d5c4bb2b49926.js
    • ..
  • Authentication Request Identified [10111] total: 1:
    • http://localhost:3000/
  • Base64 Disclosure [10094] total: 3:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • http://localhost:3000/_next/static/chunks/596-576ee912800c8120.js
    • http://localhost:3000/_next/static/chunks/596-576ee912800c8120.js
    • http://localhost:3000/_next/static/chunks/fd9d1056-d8f5e6ec3ff59217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • ..
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • http://localhost:3000/_next/static/chunks/pages/_app-52924524f99094ab.js
    • http://localhost:3000/_next/static/chunks/pages/_error-c92d5c4bb2b49926.js
    • http://localhost:3000/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js
    • ..

View the following link to download the report. RunnerID:6328825677

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • Base64 Disclosure [10094] total: 3:

View the following link to download the report. RunnerID:6330283231

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 3:
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/set/csr
  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/robots.txt
    • http://localhost:3000/set/csr
    • ..
  • Missing Anti-clickjacking Header [10020] total: 5:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/set/csr
    • http://localhost:3000/set/ssr
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • http://localhost:3000/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js
    • http://localhost:3000/_next/static/chunks/webpack-f01ca3821e292aec.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/robots.txt
    • http://localhost:3000/set/csr
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/fd9d1056-d8f5e6ec3ff59217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • http://localhost:3000/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js
    • ..
  • Authentication Request Identified [10111] total: 1:
    • http://localhost:3000/
  • Base64 Disclosure [10094] total: 3:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • http://localhost:3000/_next/static/chunks/596-576ee912800c8120.js
    • http://localhost:3000/_next/static/chunks/596-576ee912800c8120.js
    • http://localhost:3000/_next/static/chunks/fd9d1056-d8f5e6ec3ff59217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • ..
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • http://localhost:3000/_next/static/chunks/webpack-f01ca3821e292aec.js
    • http://localhost:3000/_next/static/css/b6d797271503e28a.css
    • ..

View the following link to download the report. RunnerID:6330321878

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 3:
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/set/csr
  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/robots.txt
    • http://localhost:3000/set/csr
    • ..
  • Missing Anti-clickjacking Header [10020] total: 5:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/set/csr
    • http://localhost:3000/set/ssr
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/pages/_app-52924524f99094ab.js
    • http://localhost:3000/_next/static/chunks/pages/_error-c92d5c4bb2b49926.js
    • http://localhost:3000/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js
    • http://localhost:3000/_next/static/chunks/webpack-f01ca3821e292aec.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/robots.txt
    • http://localhost:3000/set/csr
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • http://localhost:3000/_next/static/chunks/pages/_app-52924524f99094ab.js
    • http://localhost:3000/_next/static/chunks/pages/_error-c92d5c4bb2b49926.js
    • ..
  • Authentication Request Identified [10111] total: 1:
    • http://localhost:3000/
  • Base64 Disclosure [10094] total: 3:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • http://localhost:3000/_next/static/chunks/596-576ee912800c8120.js
    • http://localhost:3000/_next/static/chunks/596-576ee912800c8120.js
    • http://localhost:3000/_next/static/chunks/fd9d1056-d8f5e6ec3ff59217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • ..
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/pages/_app-52924524f99094ab.js
    • http://localhost:3000/_next/static/chunks/pages/_error-c92d5c4bb2b49926.js
    • http://localhost:3000/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js
    • http://localhost:3000/_next/static/chunks/webpack-f01ca3821e292aec.js
    • ..

View the following link to download the report. RunnerID:6330691744

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 3:
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/set/csr
  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/robots.txt
    • http://localhost:3000/set/csr
    • ..
  • Missing Anti-clickjacking Header [10020] total: 5:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/set/csr
    • http://localhost:3000/set/ssr
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/pages/_app-52924524f99094ab.js
    • http://localhost:3000/_next/static/chunks/pages/_error-c92d5c4bb2b49926.js
    • http://localhost:3000/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/robots.txt
    • http://localhost:3000/set/csr
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/4fzEIV06_SB19cEylYO0t/_buildManifest.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/pages/_app-52924524f99094ab.js
    • http://localhost:3000/_next/static/chunks/pages/_error-c92d5c4bb2b49926.js
    • ..
  • Authentication Request Identified [10111] total: 1:
    • http://localhost:3000/
  • Base64 Disclosure [10094] total: 3:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • http://localhost:3000/_next/static/chunks/596-576ee912800c8120.js
    • http://localhost:3000/_next/static/chunks/596-576ee912800c8120.js
    • http://localhost:3000/_next/static/chunks/fd9d1056-d8f5e6ec3ff59217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • ..
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/pages/_app-52924524f99094ab.js
    • http://localhost:3000/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js
    • http://localhost:3000/_next/static/chunks/webpack-f01ca3821e292aec.js
    • ..

View the following link to download the report. RunnerID:6330795903

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 3:
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/set/csr
  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/robots.txt
    • http://localhost:3000/set/csr
    • ..
  • Missing Anti-clickjacking Header [10020] total: 5:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/set/csr
    • http://localhost:3000/set/ssr
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/4fzEIV06_SB19cEylYO0t/_ssgManifest.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • http://localhost:3000/_next/static/chunks/pages/_app-52924524f99094ab.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/get/csr
    • http://localhost:3000/get/ssr
    • http://localhost:3000/robots.txt
    • http://localhost:3000/set/csr
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/4fzEIV06_SB19cEylYO0t/_buildManifest.js
    • http://localhost:3000/_next/static/4fzEIV06_SB19cEylYO0t/_ssgManifest.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • ..
  • Authentication Request Identified [10111] total: 1:
    • http://localhost:3000/
  • Base64 Disclosure [10094] total: 3:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • http://localhost:3000/_next/static/chunks/596-576ee912800c8120.js
    • http://localhost:3000/_next/static/chunks/596-576ee912800c8120.js
    • http://localhost:3000/_next/static/chunks/fd9d1056-d8f5e6ec3ff59217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • ..
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/4fzEIV06_SB19cEylYO0t/_ssgManifest.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-c94bfc3d9f3a29bd.js
    • http://localhost:3000/_next/static/chunks/pages/_app-52924524f99094ab.js
    • ..

View the following link to download the report. RunnerID:6330971762

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 1:
    • http://localhost:3000/
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/596-f8bb50701edb19a1.js
    • http://localhost:3000/_next/static/chunks/fd9d1056-a99b58d3cc150217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-app-9bd1b95da4849919.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-1169976109af6875.js
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/596-f8bb50701edb19a1.js
    • http://localhost:3000/_next/static/chunks/fd9d1056-a99b58d3cc150217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-app-9bd1b95da4849919.js
    • ..
  • Base64 Disclosure [10094] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Information Disclosure - Suspicious Comments [10027] total: 8:
    • http://localhost:3000/_next/static/chunks/596-f8bb50701edb19a1.js
    • http://localhost:3000/_next/static/chunks/596-f8bb50701edb19a1.js
    • http://localhost:3000/_next/static/chunks/fd9d1056-a99b58d3cc150217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-1169976109af6875.js
    • ..
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/596-f8bb50701edb19a1.js
    • http://localhost:3000/_next/static/chunks/fd9d1056-a99b58d3cc150217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-app-9bd1b95da4849919.js
    • ..

View the following link to download the report. RunnerID:6331646097

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 1:
    • http://localhost:3000/todos

View the following link to download the report. RunnerID:6408343005

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 1:

View the following link to download the report. RunnerID:6409092594

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 1:
    • http://localhost:3000/
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/aNpsbhP0DjvJZDnB_DIES/_buildManifest.js
    • http://localhost:3000/_next/static/chunks/596-f8bb50701edb19a1.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-1169976109af6875.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-1169976109af6875.js
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/aNpsbhP0DjvJZDnB_DIES/_buildManifest.js
    • http://localhost:3000/_next/static/aNpsbhP0DjvJZDnB_DIES/_ssgManifest.js
    • http://localhost:3000/_next/static/chunks/596-f8bb50701edb19a1.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • ..
  • Base64 Disclosure [10094] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Information Disclosure - Suspicious Comments [10027] total: 8:
    • http://localhost:3000/_next/static/chunks/596-f8bb50701edb19a1.js
    • http://localhost:3000/_next/static/chunks/596-f8bb50701edb19a1.js
    • http://localhost:3000/_next/static/chunks/fd9d1056-a99b58d3cc150217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-1169976109af6875.js
    • ..
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/aNpsbhP0DjvJZDnB_DIES/_buildManifest.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-1169976109af6875.js
    • http://localhost:3000/_next/static/chunks/pages/_app-52924524f99094ab.js
    • ..

View the following link to download the report. RunnerID:6409192586

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 1:
    • http://localhost:3000/todos
  • Content Security Policy (CSP) Header Not Set [10038] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/todos
    • ..
  • Missing Anti-clickjacking Header [10020] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/todos
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/todos
    • ..
  • Timestamp Disclosure - Unix [10096] total: 2:
    • http://localhost:3000/_next/static/chunks/main-a85831d1a33fc12f.js
    • http://localhost:3000/operations
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/pages/_app-6ca4a4ec31e39f3d.js
    • ..
  • Base64 Disclosure [10094] total: 2:
    • http://localhost:3000/todos
    • http://localhost:3000/todos
  • Information Disclosure - Suspicious Comments [10027] total: 8:
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/framework-43665103d101a22d.js
    • http://localhost:3000/_next/static/chunks/main-a85831d1a33fc12f.js
    • ..
  • Modern Web Application [10109] total: 5:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/todos
    • http://localhost:3000/todos
  • Non-Storable Content [10049] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6409463551

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 1:

View the following link to download the report. RunnerID:6409962945

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 1:
    • http://localhost:3000/
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/aNpsbhP0DjvJZDnB_DIES/_buildManifest.js
    • http://localhost:3000/_next/static/chunks/596-f8bb50701edb19a1.js
    • http://localhost:3000/_next/static/chunks/fd9d1056-a99b58d3cc150217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-1169976109af6875.js
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/aNpsbhP0DjvJZDnB_DIES/_buildManifest.js
    • http://localhost:3000/_next/static/chunks/596-f8bb50701edb19a1.js
    • http://localhost:3000/_next/static/chunks/fd9d1056-a99b58d3cc150217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • ..
  • Base64 Disclosure [10094] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Information Disclosure - Suspicious Comments [10027] total: 8:
    • http://localhost:3000/_next/static/chunks/596-f8bb50701edb19a1.js
    • http://localhost:3000/_next/static/chunks/596-f8bb50701edb19a1.js
    • http://localhost:3000/_next/static/chunks/fd9d1056-a99b58d3cc150217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-1169976109af6875.js
    • ..
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/596-f8bb50701edb19a1.js
    • http://localhost:3000/_next/static/chunks/fd9d1056-a99b58d3cc150217.js
    • http://localhost:3000/_next/static/chunks/framework-8883d1e9be70c3da.js
    • http://localhost:3000/_next/static/chunks/main-app-9bd1b95da4849919.js
    • ..

View the following link to download the report. RunnerID:6410123860

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 3:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/todos
  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • Missing Anti-clickjacking Header [10020] total: 5:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/todos
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-a85831d1a33fc12f.js
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-a85831d1a33fc12f.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • ..
  • Base64 Disclosure [10094] total: 2:
    • http://localhost:3000/todos
    • http://localhost:3000/todos
  • Information Disclosure - Suspicious Comments [10027] total: 8:
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/framework-43665103d101a22d.js
    • http://localhost:3000/_next/static/chunks/main-a85831d1a33fc12f.js
    • ..
  • Modern Web Application [10109] total: 6:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/todos
    • ..
  • Non-Storable Content [10049] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP

View the following link to download the report. RunnerID:6410354194

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 3:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/todos
  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • Missing Anti-clickjacking Header [10020] total: 5:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/todos
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-a85831d1a33fc12f.js
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-a85831d1a33fc12f.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • ..
  • Base64 Disclosure [10094] total: 2:
    • http://localhost:3000/todos
    • http://localhost:3000/todos
  • Information Disclosure - Suspicious Comments [10027] total: 8:
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/framework-43665103d101a22d.js
    • http://localhost:3000/_next/static/chunks/main-a85831d1a33fc12f.js
    • ..
  • Modern Web Application [10109] total: 6:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/todos
    • ..
  • Non-Storable Content [10049] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP

View the following link to download the report. RunnerID:6410463000

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 3:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/todos
  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • Missing Anti-clickjacking Header [10020] total: 5:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/todos
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/pages/_app-6ca4a4ec31e39f3d.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-a85831d1a33fc12f.js
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/framework-43665103d101a22d.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • ..
  • Base64 Disclosure [10094] total: 2:
    • http://localhost:3000/todos
    • http://localhost:3000/todos
  • Information Disclosure - Suspicious Comments [10027] total: 8:
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/framework-43665103d101a22d.js
    • http://localhost:3000/_next/static/chunks/main-a85831d1a33fc12f.js
    • ..
  • Modern Web Application [10109] total: 6:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/todos
    • ..
  • Non-Storable Content [10049] total: 4:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/todos
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 7:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/webpack-2d50f6a9dc994ce6.js
    • ..
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP

View the following link to download the report. RunnerID:6411035015

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 3:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/todos
  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • Missing Anti-clickjacking Header [10020] total: 5:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/todos
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/pages/_app-6ca4a4ec31e39f3d.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-a85831d1a33fc12f.js
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-a85831d1a33fc12f.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • ..
  • Base64 Disclosure [10094] total: 2:
    • http://localhost:3000/todos
    • http://localhost:3000/todos
  • Information Disclosure - Suspicious Comments [10027] total: 8:
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/framework-43665103d101a22d.js
    • http://localhost:3000/_next/static/chunks/main-a85831d1a33fc12f.js
    • ..
  • Modern Web Application [10109] total: 6:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/todos
    • ..
  • Non-Storable Content [10049] total: 4:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/todos
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 7:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/webpack-2d50f6a9dc994ce6.js
    • ..
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP

View the following link to download the report. RunnerID:6411651700

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 3:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/todos
  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • Missing Anti-clickjacking Header [10020] total: 5:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/todos
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-a85831d1a33fc12f.js
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/pages/_app-6ca4a4ec31e39f3d.js
    • ..
  • Base64 Disclosure [10094] total: 2:
    • http://localhost:3000/todos
    • http://localhost:3000/todos
  • Information Disclosure - Suspicious Comments [10027] total: 8:
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/framework-43665103d101a22d.js
    • http://localhost:3000/_next/static/chunks/main-a85831d1a33fc12f.js
    • ..
  • Modern Web Application [10109] total: 6:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/todos
    • ..
  • Non-Storable Content [10049] total: 4:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/todos
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 7:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/webpack-2d50f6a9dc994ce6.js
    • ..
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP

View the following link to download the report. RunnerID:6411672284

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 2:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
  • Content Security Policy (CSP) Header Not Set [10038] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • Missing Anti-clickjacking Header [10020] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 10:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 4:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 4:
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 7:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP

View the following link to download the report. RunnerID:6411728993

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 2:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
  • Content Security Policy (CSP) Header Not Set [10038] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • Missing Anti-clickjacking Header [10020] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 10:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 4:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 4:
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 7:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP

View the following link to download the report. RunnerID:6411784921

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/operations
  • Permissions Policy Header Not Set [10063] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6412671006

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/operations
  • Permissions Policy Header Not Set [10063] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6420974912

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/operations
  • Permissions Policy Header Not Set [10063] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6421407283

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-1169976109af6875.js
  • Base64 Disclosure [10094] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml

View the following link to download the report. RunnerID:6422188230

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • Timestamp Disclosure - Unix [10096] total: 1:
  • Base64 Disclosure [10094] total: 2:

View the following link to download the report. RunnerID:6421407283

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/operations
  • Permissions Policy Header Not Set [10063] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6423283026

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/operations
  • Permissions Policy Header Not Set [10063] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6424811260

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/operations
  • Permissions Policy Header Not Set [10063] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6433380284

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/operations
  • Permissions Policy Header Not Set [10063] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6433733283

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/operations
  • Permissions Policy Header Not Set [10063] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6434530966

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/operations
  • Permissions Policy Header Not Set [10063] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6434657435

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/operations
  • Permissions Policy Header Not Set [10063] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6435204050

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/operations
  • Permissions Policy Header Not Set [10063] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6436069359

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/operations
  • Permissions Policy Header Not Set [10063] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6436453104

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/operations
  • Permissions Policy Header Not Set [10063] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/css/4e456e4105ca298d.css
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6436857773

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/operations
  • Permissions Policy Header Not Set [10063] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6437131706

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/operations
  • Permissions Policy Header Not Set [10063] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6437177771

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 8:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/x
    • ..
  • Content Security Policy (CSP) Header Not Set [10038] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/x
    • ..
  • Missing Anti-clickjacking Header [10020] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/x
    • ..
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/x
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 6:
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • http://localhost:3000/operations/x
    • ..
  • Non-Storable Content [10049] total: 5:
    • http://localhost:3000/path/to/your/svg-image.svg
    • http://localhost:3000/path/to/your/x
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/x
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 2:
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/x?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP

View the following link to download the report. RunnerID:6472969275

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 8:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/x
    • ..
  • Content Security Policy (CSP) Header Not Set [10038] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/x
    • ..
  • Missing Anti-clickjacking Header [10020] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/x
    • ..
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/x
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 6:
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • http://localhost:3000/operations/x
    • ..
  • Non-Storable Content [10049] total: 5:
    • http://localhost:3000/path/to/your/svg-image.svg
    • http://localhost:3000/path/to/your/x
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/x
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 2:
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/x?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP

View the following link to download the report. RunnerID:6473285931

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/operations
  • Permissions Policy Header Not Set [10063] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6474931752

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/operations
  • Permissions Policy Header Not Set [10063] total: 9:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/212-f7ecfa027896bd84.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-696c273dfa230e4f.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..

View the following link to download the report. RunnerID:6475014246

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 8:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/x
    • ..
  • Content Security Policy (CSP) Header Not Set [10038] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/x
    • ..
  • Missing Anti-clickjacking Header [10020] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/x
    • ..
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/x
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 6:
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • http://localhost:3000/operations/x
    • ..
  • Non-Storable Content [10049] total: 5:
    • http://localhost:3000/path/to/your/svg-image.svg
    • http://localhost:3000/path/to/your/x
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/x
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 2:
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/operations/x?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP

View the following link to download the report. RunnerID:6486437628

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 2:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
  • Content Security Policy (CSP) Header Not Set [10038] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • Missing Anti-clickjacking Header [10020] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Non-Storable Content [10049] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 7:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Storable but Non-Cacheable Content [10049] total: 1:
    • http://localhost:3000/img/BCID_CleanBC_rev_tagline_colour.svg
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP

View the following link to download the report. RunnerID:6487147236

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 2:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
  • Content Security Policy (CSP) Header Not Set [10038] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • Missing Anti-clickjacking Header [10020] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Non-Storable Content [10049] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 7:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Storable but Non-Cacheable Content [10049] total: 1:
    • http://localhost:3000/img/BCID_CleanBC_rev_tagline_colour.svg
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP

View the following link to download the report. RunnerID:6487813151

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 2:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
  • Content Security Policy (CSP) Header Not Set [10038] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • Missing Anti-clickjacking Header [10020] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Non-Storable Content [10049] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 7:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Storable but Non-Cacheable Content [10049] total: 1:
    • http://localhost:3000/img/BCID_CleanBC_rev_tagline_colour.svg
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
    • http://localhost:3000/operations/create?root_bcghrp_id=ZAP&root_eligible_commercial_product_name=ZAP&root_estimated_emissions=1&root_ghfrp_id=ZAP&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_naics_code_id=ZAP&root_name=ZAP&root_nearest_municipality=ZAP&root_npr_id=ZAP&root_operation_type=ZAP&root_operator_id=1&root_operator_percent_of_ownership=1&root_permit_id=ZAP&root_petrinex_id=ZAP

View the following link to download the report. RunnerID:6487953333

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 2:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_Did+you+submit+a+GHG+emissions+report+for+reporting+year+2022%3F=on&root_Does+the+operation+have+multiple+operators%3F=on&root_Is+the+operation+representative+the+same+as+mentioned+in+%22admin+access+request%22%3F=on&root_Would+you+like+to+add+an+additional+operation+registration+lead%3F=on&root_bcer_permit_id=1&root_current_year_estimated_emissions=1&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_major_new_operation=on&root_naics_category_id=1&root_naics_code_id&root_name=ZAP&root_new_entrant=on&root_npri_id=1&root_opt_in=on&root_permit_issuing_agency=ZAP&root_permit_number=ZAP&root_physical_municipality=ZAP&root_physical_postal_code=ZAP&root_physical_province=0&root_physical_street_address=ZAP&root_reporting_activities=ZAP&root_type=ZAP
  • Content Security Policy (CSP) Header Not Set [10038] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_Did+you+submit+a+GHG+emissions+report+for+reporting+year+2022%3F=on&root_Does+the+operation+have+multiple+operators%3F=on&root_Is+the+operation+representative+the+same+as+mentioned+in+%22admin+access+request%22%3F=on&root_Would+you+like+to+add+an+additional+operation+registration+lead%3F=on&root_bcer_permit_id=1&root_current_year_estimated_emissions=1&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_major_new_operation=on&root_naics_category_id=1&root_naics_code_id&root_name=ZAP&root_new_entrant=on&root_npri_id=1&root_opt_in=on&root_permit_issuing_agency=ZAP&root_permit_number=ZAP&root_physical_municipality=ZAP&root_physical_postal_code=ZAP&root_physical_province=0&root_physical_street_address=ZAP&root_reporting_activities=ZAP&root_type=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • Missing Anti-clickjacking Header [10020] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_Did+you+submit+a+GHG+emissions+report+for+reporting+year+2022%3F=on&root_Does+the+operation+have+multiple+operators%3F=on&root_Is+the+operation+representative+the+same+as+mentioned+in+%22admin+access+request%22%3F=on&root_Would+you+like+to+add+an+additional+operation+registration+lead%3F=on&root_bcer_permit_id=1&root_current_year_estimated_emissions=1&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_major_new_operation=on&root_naics_category_id=1&root_naics_code_id&root_name=ZAP&root_new_entrant=on&root_npri_id=1&root_opt_in=on&root_permit_issuing_agency=ZAP&root_permit_number=ZAP&root_physical_municipality=ZAP&root_physical_postal_code=ZAP&root_physical_province=0&root_physical_street_address=ZAP&root_reporting_activities=ZAP&root_type=ZAP
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_Did+you+submit+a+GHG+emissions+report+for+reporting+year+2022%3F=on&root_Does+the+operation+have+multiple+operators%3F=on&root_Is+the+operation+representative+the+same+as+mentioned+in+%22admin+access+request%22%3F=on&root_Would+you+like+to+add+an+additional+operation+registration+lead%3F=on&root_bcer_permit_id=1&root_current_year_estimated_emissions=1&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_major_new_operation=on&root_naics_category_id=1&root_naics_code_id&root_name=ZAP&root_new_entrant=on&root_npri_id=1&root_opt_in=on&root_permit_issuing_agency=ZAP&root_permit_number=ZAP&root_physical_municipality=ZAP&root_physical_postal_code=ZAP&root_physical_province=0&root_physical_street_address=ZAP&root_reporting_activities=ZAP&root_type=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Base64 Disclosure [10094] total: 1:
    • http://localhost:3000/operations/create?root_Did+you+submit+a+GHG+emissions+report+for+reporting+year+2022%3F=on&root_Does+the+operation+have+multiple+operators%3F=on&root_Is+the+operation+representative+the+same+as+mentioned+in+%22admin+access+request%22%3F=on&root_Would+you+like+to+add+an+additional+operation+registration+lead%3F=on&root_bcer_permit_id=1&root_current_year_estimated_emissions=1&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_major_new_operation=on&root_naics_category_id=1&root_naics_code_id&root_name=ZAP&root_new_entrant=on&root_npri_id=1&root_opt_in=on&root_permit_issuing_agency=ZAP&root_permit_number=ZAP&root_physical_municipality=ZAP&root_physical_postal_code=ZAP&root_physical_province=0&root_physical_street_address=ZAP&root_reporting_activities=ZAP&root_type=ZAP
  • Information Disclosure - Suspicious Comments [10027] total: 6:
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • http://localhost:3000/operations/create
    • ..
  • Non-Storable Content [10049] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 7:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Storable but Non-Cacheable Content [10049] total: 1:
    • http://localhost:3000/img/BCID_CleanBC_rev_tagline_colour.svg
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
    • http://localhost:3000/operations/create?root_Did+you+submit+a+GHG+emissions+report+for+reporting+year+2022%3F=on&root_Does+the+operation+have+multiple+operators%3F=on&root_Is+the+operation+representative+the+same+as+mentioned+in+%22admin+access+request%22%3F=on&root_Would+you+like+to+add+an+additional+operation+registration+lead%3F=on&root_bcer_permit_id=1&root_current_year_estimated_emissions=1&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_major_new_operation=on&root_naics_category_id=1&root_naics_code_id&root_name=ZAP&root_new_entrant=on&root_npri_id=1&root_opt_in=on&root_permit_issuing_agency=ZAP&root_permit_number=ZAP&root_physical_municipality=ZAP&root_physical_postal_code=ZAP&root_physical_province=0&root_physical_street_address=ZAP&root_reporting_activities=ZAP&root_type=ZAP

View the following link to download the report. RunnerID:6501479450

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 2:
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_Did+you+submit+a+GHG+emissions+report+for+reporting+year+2022%3F=on&root_Does+the+operation+have+multiple+operators%3F=on&root_Is+the+operation+representative+the+same+as+mentioned+in+%22admin+access+request%22%3F=on&root_Would+you+like+to+add+an+additional+operation+registration+lead%3F=on&root_bcer_permit_id=1&root_current_year_estimated_emissions=1&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_major_new_operation=on&root_naics_category_id=1&root_naics_code_id&root_name=ZAP&root_new_entrant=on&root_npri_id=1&root_opt_in=on&root_permit_issuing_agency=ZAP&root_permit_number=ZAP&root_physical_municipality=ZAP&root_physical_postal_code=ZAP&root_physical_province=0&root_physical_street_address=ZAP&root_reporting_activities=ZAP&root_type=ZAP
  • Content Security Policy (CSP) Header Not Set [10038] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_Did+you+submit+a+GHG+emissions+report+for+reporting+year+2022%3F=on&root_Does+the+operation+have+multiple+operators%3F=on&root_Is+the+operation+representative+the+same+as+mentioned+in+%22admin+access+request%22%3F=on&root_Would+you+like+to+add+an+additional+operation+registration+lead%3F=on&root_bcer_permit_id=1&root_current_year_estimated_emissions=1&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_major_new_operation=on&root_naics_category_id=1&root_naics_code_id&root_name=ZAP&root_new_entrant=on&root_npri_id=1&root_opt_in=on&root_permit_issuing_agency=ZAP&root_permit_number=ZAP&root_physical_municipality=ZAP&root_physical_postal_code=ZAP&root_physical_province=0&root_physical_street_address=ZAP&root_reporting_activities=ZAP&root_type=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • Missing Anti-clickjacking Header [10020] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_Did+you+submit+a+GHG+emissions+report+for+reporting+year+2022%3F=on&root_Does+the+operation+have+multiple+operators%3F=on&root_Is+the+operation+representative+the+same+as+mentioned+in+%22admin+access+request%22%3F=on&root_Would+you+like+to+add+an+additional+operation+registration+lead%3F=on&root_bcer_permit_id=1&root_current_year_estimated_emissions=1&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_major_new_operation=on&root_naics_category_id=1&root_naics_code_id&root_name=ZAP&root_new_entrant=on&root_npri_id=1&root_opt_in=on&root_permit_issuing_agency=ZAP&root_permit_number=ZAP&root_physical_municipality=ZAP&root_physical_postal_code=ZAP&root_physical_province=0&root_physical_street_address=ZAP&root_reporting_activities=ZAP&root_type=ZAP
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/operations
    • http://localhost:3000/operations/create
    • http://localhost:3000/operations/create?root_Did+you+submit+a+GHG+emissions+report+for+reporting+year+2022%3F=on&root_Does+the+operation+have+multiple+operators%3F=on&root_Is+the+operation+representative+the+same+as+mentioned+in+%22admin+access+request%22%3F=on&root_Would+you+like+to+add+an+additional+operation+registration+lead%3F=on&root_bcer_permit_id=1&root_current_year_estimated_emissions=1&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_major_new_operation=on&root_naics_category_id=1&root_naics_code_id&root_name=ZAP&root_new_entrant=on&root_npri_id=1&root_opt_in=on&root_permit_issuing_agency=ZAP&root_permit_number=ZAP&root_physical_municipality=ZAP&root_physical_postal_code=ZAP&root_physical_province=0&root_physical_street_address=ZAP&root_reporting_activities=ZAP&root_type=ZAP
    • http://localhost:3000/robots.txt
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Base64 Disclosure [10094] total: 1:
    • http://localhost:3000/operations/create?root_Did+you+submit+a+GHG+emissions+report+for+reporting+year+2022%3F=on&root_Does+the+operation+have+multiple+operators%3F=on&root_Is+the+operation+representative+the+same+as+mentioned+in+%22admin+access+request%22%3F=on&root_Would+you+like+to+add+an+additional+operation+registration+lead%3F=on&root_bcer_permit_id=1&root_current_year_estimated_emissions=1&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_major_new_operation=on&root_naics_category_id=1&root_naics_code_id&root_name=ZAP&root_new_entrant=on&root_npri_id=1&root_opt_in=on&root_permit_issuing_agency=ZAP&root_permit_number=ZAP&root_physical_municipality=ZAP&root_physical_postal_code=ZAP&root_physical_province=0&root_physical_street_address=ZAP&root_reporting_activities=ZAP&root_type=ZAP
  • Information Disclosure - Suspicious Comments [10027] total: 6:
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • http://localhost:3000/operations/create
    • ..
  • Non-Storable Content [10049] total: 3:
    • http://localhost:3000/operations
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Storable and Cacheable Content [10049] total: 7:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-00bd4b129d3694ce.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-9023741d76bb58a1.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Storable but Non-Cacheable Content [10049] total: 1:
    • http://localhost:3000/img/BCID_CleanBC_rev_tagline_colour.svg
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
    • http://localhost:3000/operations/create?root_Did+you+submit+a+GHG+emissions+report+for+reporting+year+2022%3F=on&root_Does+the+operation+have+multiple+operators%3F=on&root_Is+the+operation+representative+the+same+as+mentioned+in+%22admin+access+request%22%3F=on&root_Would+you+like+to+add+an+additional+operation+registration+lead%3F=on&root_bcer_permit_id=1&root_current_year_estimated_emissions=1&root_latitude=1&root_legal_land_description=ZAP&root_longitude=1&root_major_new_operation=on&root_naics_category_id=1&root_naics_code_id&root_name=ZAP&root_new_entrant=on&root_npri_id=1&root_opt_in=on&root_permit_issuing_agency=ZAP&root_permit_number=ZAP&root_physical_municipality=ZAP&root_physical_postal_code=ZAP&root_physical_province=0&root_physical_street_address=ZAP&root_reporting_activities=ZAP&root_type=ZAP

View the following link to download the report. RunnerID:6501472647

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/completeguidance
    • http://localhost:3000/program-website
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • ..
  • Missing Anti-clickjacking Header [10020] total: 1:
    • http://localhost:3000/
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-52dd22f97f06bd95.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-3d82762915175399.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/completeguidance
    • http://localhost:3000/program-website
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 10:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-52dd22f97f06bd95.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-3d82762915175399.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • ..
  • Base64 Disclosure [10094] total: 2:
    • http://localhost:3000/img/registration/image5.svg
    • http://localhost:3000/img/registration/image6.svg
  • Information Disclosure - Suspicious Comments [10027] total: 5:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-52dd22f97f06bd95.js
    • http://localhost:3000/_next/static/chunks/26-52dd22f97f06bd95.js
    • http://localhost:3000/_next/static/chunks/bf6a786c-3d82762915175399.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  • Modern Web Application [10109] total: 6:
    • http://localhost:3000/
    • http://localhost:3000/completeguidance
    • http://localhost:3000/program-website
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • ..
  • Non-Storable Content [10049] total: 5:
    • http://localhost:3000/completeguidance
    • http://localhost:3000/program-website
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/undefined
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Storable and Cacheable Content [10049] total: 5:
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/26-52dd22f97f06bd95.js
    • http://localhost:3000/_next/static/chunks/main-app-34d8779809051e39.js
    • http://localhost:3000/_next/static/chunks/webpack-b9c9bed208c57a5e.js
    • http://localhost:3000/_next/static/css/5150094f62ef3cee.css
  • Storable but Non-Cacheable Content [10049] total: 1:
    • http://localhost:3000/img/BCID_CleanBC_rev_tagline_colour.svg

View the following link to download the report. RunnerID:6511411021