ZAP Full Scan Report - Githubissues

bcgov / hcap

Application supporting access to the Health Career Access Program (HCAP) for employers and participants.

Apache License 2.0

2 stars 1 forks source link

ZAP Full Scan Report #1029

Open github-actions[bot] opened 7 months ago

github-actions[bot] commented 7 months ago

Site: https://hcapemployers.dev.freshworks.club New Alerts
- Hidden File Found [40035] total: 4:
- Proxy Disclosure [40025] total: 11:
- Cookie No HttpOnly Flag [10010] total: 9:
- Cookie Without Secure Flag [10011] total: 9:
- Cookie without SameSite Attribute [10054] total: 9:
- Dangerous JS Functions [10110] total: 1:
  - https://hcapemployers.dev.freshworks.club/static/js/10.b17209ee.chunk.js
- Permissions Policy Header Not Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 38:
- Cookie Slack Detector [90027] total: 11:
- Information Disclosure - Suspicious Comments [10027] total: 2:
  - https://hcapemployers.dev.freshworks.club/static/js/10.b17209ee.chunk.js
  - https://hcapemployers.dev.freshworks.club/static/js/main.780718b1.chunk.js
- Modern Web Application [10109] total: 5:
- Non-Storable Content [10049] total: 9:
- Re-examine Cache-control Directives [10015] total: 4:
- User Agent Fuzzer [10104] total: 72:

View the following link to download the report. RunnerID:8085734216