ZAP Scan Baseline Report - Githubissues

bcgov / moh-keycloak-client-configurations

Apache License 2.0

1 stars 2 forks source link

ZAP Scan Baseline Report #385

Open github-actions[bot] opened 11 months ago

github-actions[bot] commented 11 months ago

Site: https://common-logon-dev.hlth.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 1:
  - https://common-logon-dev.hlth.gov.bc.ca/auth/
- CSP: script-src unsafe-inline [10055] total: 1:
  - https://common-logon-dev.hlth.gov.bc.ca/auth/
- CSP: style-src unsafe-inline [10055] total: 1:
  - https://common-logon-dev.hlth.gov.bc.ca/auth/
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- Missing Anti-clickjacking Header [10020] total: 1:
  - https://common-logon-dev.hlth.gov.bc.ca/
- Permissions Policy Header Not Set [10063] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 4:
- X-Content-Type-Options Header Missing [10021] total: 2:
  - https://common-logon-dev.hlth.gov.bc.ca/
  - https://common-logon-dev.hlth.gov.bc.ca/robots.txt
- Information Disclosure - Suspicious Comments [10027] total: 1:
  - https://common-logon-dev.hlth.gov.bc.ca/auth/
- Non-Storable Content [10049] total: 3:
- Re-examine Cache-control Directives [10015] total: 2:
  - https://common-logon-dev.hlth.gov.bc.ca/
  - https://common-logon-dev.hlth.gov.bc.ca/robots.txt
- Storable and Cacheable Content [10049] total: 8:

View the following link to download the report. RunnerID:6906918983

github-actions[bot] commented 9 months ago

Site: https://common-logon-dev.hlth.gov.bc.ca Resolved Alerts
- Missing Anti-clickjacking Header [10020] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 1:

View the following link to download the report. RunnerID:7834079702

github-actions[bot] commented 7 months ago

Site: https://common-logon-test.hlth.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 2:
  - https://common-logon-test.hlth.gov.bc.ca/
  - https://common-logon-test.hlth.gov.bc.ca/auth/
- CSP: script-src unsafe-inline [10055] total: 2:
  - https://common-logon-test.hlth.gov.bc.ca/
  - https://common-logon-test.hlth.gov.bc.ca/auth/
- CSP: style-src unsafe-inline [10055] total: 2:
  - https://common-logon-test.hlth.gov.bc.ca/
  - https://common-logon-test.hlth.gov.bc.ca/auth/
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
  - https://common-logon-test.hlth.gov.bc.ca/auth/admin/
  - https://common-logon-test.hlth.gov.bc.ca/sitemap.xml
- Cookie without SameSite Attribute [10054] total: 12:
- Permissions Policy Header Not Set [10063] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 3:
- X-Content-Type-Options Header Missing [10021] total: 1:
  - https://common-logon-test.hlth.gov.bc.ca/robots.txt
- Non-Storable Content [10049] total: 3:
- Re-examine Cache-control Directives [10015] total: 1:
  - https://common-logon-test.hlth.gov.bc.ca/robots.txt
- Storable and Cacheable Content [10049] total: 9:

View the following link to download the report. RunnerID:8302384956

github-actions[bot] commented 7 months ago

Site: https://common-logon-dev.hlth.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 2:
  - https://common-logon-dev.hlth.gov.bc.ca/
  - https://common-logon-dev.hlth.gov.bc.ca/auth/
- CSP: script-src unsafe-inline [10055] total: 2:
  - https://common-logon-dev.hlth.gov.bc.ca/
  - https://common-logon-dev.hlth.gov.bc.ca/auth/
- CSP: style-src unsafe-inline [10055] total: 2:
  - https://common-logon-dev.hlth.gov.bc.ca/
  - https://common-logon-dev.hlth.gov.bc.ca/auth/
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
  - https://common-logon-dev.hlth.gov.bc.ca/auth/admin/
  - https://common-logon-dev.hlth.gov.bc.ca/sitemap.xml
- Permissions Policy Header Not Set [10063] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 3:
- X-Content-Type-Options Header Missing [10021] total: 1:
  - https://common-logon-dev.hlth.gov.bc.ca/robots.txt
- Non-Storable Content [10049] total: 3:
- Re-examine Cache-control Directives [10015] total: 1:
  - https://common-logon-dev.hlth.gov.bc.ca/robots.txt
- Storable and Cacheable Content [10049] total: 9:

View the following link to download the report. RunnerID:8382616977

github-actions[bot] commented 7 months ago

Site: https://user-management-dev.hlth.gov.bc.ca New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- Permissions Policy Header Not Set [10063] total: 3:
- Strict-Transport-Security Header Not Set [10035] total: 3:
- Non-Storable Content [10049] total: 3:

View the following link to download the report. RunnerID:8393168701