ZAP Full Scan Report - Githubissues

bcgov / hcap

Application supporting access to the Health Career Access Program (HCAP) for employers and participants.

Apache License 2.0

2 stars 1 forks source link

ZAP Full Scan Report #867

Open github-actions[bot] opened 1 year ago

github-actions[bot] commented 1 year ago

Site: https://hcapemployers.dev.freshworks.club New Alerts
- Hidden File Found [40035] total: 4:
- Proxy Disclosure [40025] total: 11:
- Cookie No HttpOnly Flag [10010] total: 9:
- Cookie Without Secure Flag [10011] total: 9:
- Cookie without SameSite Attribute [10054] total: 9:
- Dangerous JS Functions [10110] total: 1:
  - https://hcapemployers.dev.freshworks.club/static/js/8.5952d224.chunk.js
- Permissions Policy Header Not Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 35:
- Cookie Slack Detector [90027] total: 11:
- Information Disclosure - Suspicious Comments [10027] total: 2:
  - https://hcapemployers.dev.freshworks.club/static/js/8.5952d224.chunk.js
  - https://hcapemployers.dev.freshworks.club/static/js/main.b61042f3.chunk.js
- Modern Web Application [10109] total: 5:
- Non-Storable Content [10049] total: 9:
- Re-examine Cache-control Directives [10015] total: 4:
- User Agent Fuzzer [10104] total: 72:

View the following link to download the report. RunnerID:4010851578

github-actions[bot] commented 1 year ago

Site: https://hcapemployers.dev.freshworks.club Resolved Alerts
- Dangerous JS Functions [10110] total: 1:
- Timestamp Disclosure - Unix [10096] total: 35:

View the following link to download the report. RunnerID:4087990434

github-actions[bot] commented 1 year ago

Site: https://hcapemployers.dev.freshworks.club New Alerts
- Dangerous JS Functions [10110] total: 1:
  - https://hcapemployers.dev.freshworks.club/static/js/8.c3647e84.chunk.js
- Timestamp Disclosure - Unix [10096] total: 35:

View the following link to download the report. RunnerID:4118628491

github-actions[bot] commented 1 year ago

Site: https://hcapemployers.dev.freshworks.club Resolved Alerts
- Dangerous JS Functions [10110] total: 1:
- Timestamp Disclosure - Unix [10096] total: 35:

View the following link to download the report. RunnerID:4357702613

github-actions[bot] commented 1 year ago

Site: https://hcapemployers.dev.freshworks.club New Alerts
- Dangerous JS Functions [10110] total: 1:
  - https://hcapemployers.dev.freshworks.club/static/js/8.3d1eedd9.chunk.js
- Timestamp Disclosure - Unix [10096] total: 35:

View the following link to download the report. RunnerID:4368313017

github-actions[bot] commented 1 year ago

Site: https://hcapemployers.dev.freshworks.club Resolved Alerts
- Dangerous JS Functions [10110] total: 1:
- Timestamp Disclosure - Unix [10096] total: 35:

View the following link to download the report. RunnerID:4473389547

github-actions[bot] commented 1 year ago

Site: https://hcapemployers.dev.freshworks.club New Alerts
- Dangerous JS Functions [10110] total: 2:
  - https://hcapemployers.dev.freshworks.club/static/js/8.2a537546.chunk.js
  - https://hcapemployers.dev.freshworks.club/static/js/8.c3f272fa.chunk.js
- Timestamp Disclosure - Unix [10096] total: 35:

View the following link to download the report. RunnerID:4483291635

github-actions[bot] commented 1 year ago

Site: https://hcapemployers.dev.freshworks.club Resolved Alerts
- Dangerous JS Functions [10110] total: 2:
- Timestamp Disclosure - Unix [10096] total: 35:

View the following link to download the report. RunnerID:4825120714

github-actions[bot] commented 1 year ago

Site: https://hcapemployers.dev.freshworks.club New Alerts
- Dangerous JS Functions [10110] total: 2:
  - https://hcapemployers.dev.freshworks.club/static/js/10.1d808b21.chunk.js
  - https://hcapemployers.dev.freshworks.club/static/js/10.bef2d0fc.chunk.js
- Timestamp Disclosure - Unix [10096] total: 72:

View the following link to download the report. RunnerID:4825740659