ZAP Scan Baseline Report

[github-actions[bot]]

• Site: https://common-logon-dev.hlth.gov.bc.ca New Alerts
  • CSP: Wildcard Directive [10055] total: 2:
    • https://common-logon-dev.hlth.gov.bc.ca/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/
  • CSP: script-src unsafe-inline [10055] total: 3:
    • https://common-logon-dev.hlth.gov.bc.ca/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • CSP: style-src unsafe-inline [10055] total: 3:
    • https://common-logon-dev.hlth.gov.bc.ca/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • Content Security Policy (CSP) Header Not Set [10038] total: 2:
    • https://common-logon-dev.hlth.gov.bc.ca/auth/admin/
    • https://common-logon-dev.hlth.gov.bc.ca/sitemap.xml
  • Dangerous JS Functions [10110] total: 2:
    • https://common-logon-dev.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • Permissions Policy Header Not Set [10063] total: 7:
    • https://common-logon-dev.hlth.gov.bc.ca/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/admin/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account/
    • ..
  • Strict-Transport-Security Header Not Set [10035] total: 3:
    • https://common-logon-dev.hlth.gov.bc.ca/auth/admin/
    • https://common-logon-dev.hlth.gov.bc.ca/robots.txt
    • https://common-logon-dev.hlth.gov.bc.ca/sitemap.xml
  • Timestamp Disclosure - Unix [10096] total: 3:
    • https://common-logon-dev.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-dev.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications
  • X-Content-Type-Options Header Missing [10021] total: 1:
    • https://common-logon-dev.hlth.gov.bc.ca/robots.txt
  • Information Disclosure - Suspicious Comments [10027] total: 6:
    • https://common-logon-dev.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-dev.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-dev.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-dev.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account/
    • ..
  • Modern Web Application [10109] total: 1:
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • Non-Storable Content [10049] total: 4:
    • https://common-logon-dev.hlth.gov.bc.ca/
    • https://common-logon-dev.hlth.gov.bc.ca/auth
    • https://common-logon-dev.hlth.gov.bc.ca/auth/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account
  • Re-examine Cache-control Directives [10015] total: 3:
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account/
    • https://common-logon-dev.hlth.gov.bc.ca/robots.txt
  • Storable and Cacheable Content [10049] total: 6:
    • https://common-logon-dev.hlth.gov.bc.ca/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms
    • https://common-logon-dev.hlth.gov.bc.ca/auth/resources/ng78f/welcome/keycloak/css/welcome.css
    • https://common-logon-dev.hlth.gov.bc.ca/auth/resources/ng78f/welcome/keycloak/img/favicon.ico
    • https://common-logon-dev.hlth.gov.bc.ca/robots.txt
    • ..
  • Storable but Non-Cacheable Content [10049] total: 2:
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account/

View the following link to download the report. RunnerID:8393227151

[github-actions[bot]]

• Site: https://common-logon-test.hlth.gov.bc.ca New Alerts
  • CSP: Wildcard Directive [10055] total: 3:
    • https://common-logon-test.hlth.gov.bc.ca/
    • https://common-logon-test.hlth.gov.bc.ca/auth/
    • https://common-logon-test.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • CSP: script-src unsafe-inline [10055] total: 3:
    • https://common-logon-test.hlth.gov.bc.ca/
    • https://common-logon-test.hlth.gov.bc.ca/auth/
    • https://common-logon-test.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • CSP: style-src unsafe-inline [10055] total: 3:
    • https://common-logon-test.hlth.gov.bc.ca/
    • https://common-logon-test.hlth.gov.bc.ca/auth/
    • https://common-logon-test.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • Content Security Policy (CSP) Header Not Set [10038] total: 2:
    • https://common-logon-test.hlth.gov.bc.ca/auth/admin/
    • https://common-logon-test.hlth.gov.bc.ca/sitemap.xml
  • Cookie without SameSite Attribute [10054] total: 12:
    • https://common-logon-test.hlth.gov.bc.ca/
    • https://common-logon-test.hlth.gov.bc.ca/auth
    • https://common-logon-test.hlth.gov.bc.ca/auth/
    • https://common-logon-test.hlth.gov.bc.ca/auth/realms
    • https://common-logon-test.hlth.gov.bc.ca/auth/realms/moh_applications
    • ..
  • Dangerous JS Functions [10110] total: 2:
    • https://common-logon-test.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-test.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • Permissions Policy Header Not Set [10063] total: 7:
    • https://common-logon-test.hlth.gov.bc.ca/
    • https://common-logon-test.hlth.gov.bc.ca/auth/
    • https://common-logon-test.hlth.gov.bc.ca/auth/admin/
    • https://common-logon-test.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-test.hlth.gov.bc.ca/auth/realms/moh_applications/account/
    • ..
  • Strict-Transport-Security Header Not Set [10035] total: 3:
    • https://common-logon-test.hlth.gov.bc.ca/auth/admin/
    • https://common-logon-test.hlth.gov.bc.ca/robots.txt
    • https://common-logon-test.hlth.gov.bc.ca/sitemap.xml
  • Timestamp Disclosure - Unix [10096] total: 3:
    • https://common-logon-test.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-test.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-test.hlth.gov.bc.ca/auth/realms/moh_applications
  • X-Content-Type-Options Header Missing [10021] total: 1:
    • https://common-logon-test.hlth.gov.bc.ca/robots.txt
  • Information Disclosure - Suspicious Comments [10027] total: 6:
    • https://common-logon-test.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-test.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-test.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-test.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-test.hlth.gov.bc.ca/auth/realms/moh_applications/account/
    • ..
  • Modern Web Application [10109] total: 1:
    • https://common-logon-test.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • Non-Storable Content [10049] total: 5:
    • https://common-logon-test.hlth.gov.bc.ca/
    • https://common-logon-test.hlth.gov.bc.ca/auth
    • https://common-logon-test.hlth.gov.bc.ca/auth/
    • https://common-logon-test.hlth.gov.bc.ca/auth/admin/
    • https://common-logon-test.hlth.gov.bc.ca/auth/realms/moh_applications/account
  • Re-examine Cache-control Directives [10015] total: 3:
    • https://common-logon-test.hlth.gov.bc.ca/auth/realms/moh_applications
    • https://common-logon-test.hlth.gov.bc.ca/auth/realms/moh_applications/account/
    • https://common-logon-test.hlth.gov.bc.ca/robots.txt
  • Storable and Cacheable Content [10049] total: 6:
    • https://common-logon-test.hlth.gov.bc.ca/
    • https://common-logon-test.hlth.gov.bc.ca/auth/realms
    • https://common-logon-test.hlth.gov.bc.ca/auth/resources/472zi/welcome/keycloak/css/welcome.css
    • https://common-logon-test.hlth.gov.bc.ca/auth/resources/472zi/welcome/keycloak/img/favicon.ico
    • https://common-logon-test.hlth.gov.bc.ca/robots.txt
    • ..
  • Storable but Non-Cacheable Content [10049] total: 2:
    • https://common-logon-test.hlth.gov.bc.ca/auth/realms/moh_applications
    • https://common-logon-test.hlth.gov.bc.ca/auth/realms/moh_applications/account/

View the following link to download the report. RunnerID:8393272050

[github-actions[bot]]

• Site: https://common-logon.hlth.gov.bc.ca New Alerts
  • CSP: Wildcard Directive [10055] total: 3:
    • https://common-logon.hlth.gov.bc.ca/
    • https://common-logon.hlth.gov.bc.ca/auth/
    • https://common-logon.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • CSP: script-src unsafe-inline [10055] total: 3:
    • https://common-logon.hlth.gov.bc.ca/
    • https://common-logon.hlth.gov.bc.ca/auth/
    • https://common-logon.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • CSP: style-src unsafe-inline [10055] total: 3:
    • https://common-logon.hlth.gov.bc.ca/
    • https://common-logon.hlth.gov.bc.ca/auth/
    • https://common-logon.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • Content Security Policy (CSP) Header Not Set [10038] total: 2:
    • https://common-logon.hlth.gov.bc.ca/auth/admin/
    • https://common-logon.hlth.gov.bc.ca/sitemap.xml
  • Cookie without SameSite Attribute [10054] total: 12:
    • https://common-logon.hlth.gov.bc.ca/
    • https://common-logon.hlth.gov.bc.ca/auth
    • https://common-logon.hlth.gov.bc.ca/auth/
    • https://common-logon.hlth.gov.bc.ca/auth/realms
    • https://common-logon.hlth.gov.bc.ca/auth/realms/moh_applications
    • ..
  • Dangerous JS Functions [10110] total: 2:
    • https://common-logon.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • Permissions Policy Header Not Set [10063] total: 7:
    • https://common-logon.hlth.gov.bc.ca/
    • https://common-logon.hlth.gov.bc.ca/auth/
    • https://common-logon.hlth.gov.bc.ca/auth/admin/
    • https://common-logon.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon.hlth.gov.bc.ca/auth/realms/moh_applications/account/
    • ..
  • Strict-Transport-Security Header Not Set [10035] total: 3:
    • https://common-logon.hlth.gov.bc.ca/auth/admin/
    • https://common-logon.hlth.gov.bc.ca/robots.txt
    • https://common-logon.hlth.gov.bc.ca/sitemap.xml
  • Timestamp Disclosure - Unix [10096] total: 3:
    • https://common-logon.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon.hlth.gov.bc.ca/auth/realms/moh_applications
  • X-Content-Type-Options Header Missing [10021] total: 1:
    • https://common-logon.hlth.gov.bc.ca/robots.txt
  • Information Disclosure - Suspicious Comments [10027] total: 6:
    • https://common-logon.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon.hlth.gov.bc.ca/auth/realms/moh_applications/account/
    • ..
  • Modern Web Application [10109] total: 1:
    • https://common-logon.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • Non-Storable Content [10049] total: 5:
    • https://common-logon.hlth.gov.bc.ca/
    • https://common-logon.hlth.gov.bc.ca/auth
    • https://common-logon.hlth.gov.bc.ca/auth/
    • https://common-logon.hlth.gov.bc.ca/auth/admin/
    • https://common-logon.hlth.gov.bc.ca/auth/realms/moh_applications/account
  • Re-examine Cache-control Directives [10015] total: 3:
    • https://common-logon.hlth.gov.bc.ca/auth/realms/moh_applications
    • https://common-logon.hlth.gov.bc.ca/auth/realms/moh_applications/account/
    • https://common-logon.hlth.gov.bc.ca/robots.txt
  • Storable and Cacheable Content [10049] total: 6:
    • https://common-logon.hlth.gov.bc.ca/
    • https://common-logon.hlth.gov.bc.ca/auth/realms
    • https://common-logon.hlth.gov.bc.ca/auth/resources/on1k1/welcome/keycloak/css/welcome.css
    • https://common-logon.hlth.gov.bc.ca/auth/resources/on1k1/welcome/keycloak/img/favicon.ico
    • https://common-logon.hlth.gov.bc.ca/robots.txt
    • ..
  • Storable but Non-Cacheable Content [10049] total: 1:
    • https://common-logon.hlth.gov.bc.ca/auth/realms/moh_applications

View the following link to download the report. RunnerID:8840663430

[github-actions[bot]]

• Site: https://common-logon-dev.hlth.gov.bc.ca New Alerts
  • CSP: Wildcard Directive [10055] total: 2:
    • https://common-logon-dev.hlth.gov.bc.ca/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/
  • CSP: script-src unsafe-inline [10055] total: 3:
    • https://common-logon-dev.hlth.gov.bc.ca/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • CSP: style-src unsafe-inline [10055] total: 3:
    • https://common-logon-dev.hlth.gov.bc.ca/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • Content Security Policy (CSP) Header Not Set [10038] total: 2:
    • https://common-logon-dev.hlth.gov.bc.ca/auth/admin/
    • https://common-logon-dev.hlth.gov.bc.ca/sitemap.xml
  • Dangerous JS Functions [10110] total: 2:
    • https://common-logon-dev.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • Permissions Policy Header Not Set [10063] total: 7:
    • https://common-logon-dev.hlth.gov.bc.ca/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/admin/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account/
    • ..
  • Strict-Transport-Security Header Not Set [10035] total: 3:
    • https://common-logon-dev.hlth.gov.bc.ca/auth/admin/
    • https://common-logon-dev.hlth.gov.bc.ca/robots.txt
    • https://common-logon-dev.hlth.gov.bc.ca/sitemap.xml
  • Timestamp Disclosure - Unix [10096] total: 3:
    • https://common-logon-dev.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-dev.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications
  • X-Content-Type-Options Header Missing [10021] total: 1:
    • https://common-logon-dev.hlth.gov.bc.ca/robots.txt
  • Information Disclosure - Suspicious Comments [10027] total: 6:
    • https://common-logon-dev.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-dev.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-dev.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-dev.hlth.gov.bc.ca/auth/js/keycloak.js
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account/
    • ..
  • Modern Web Application [10109] total: 1:
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account/
  • Non-Storable Content [10049] total: 4:
    • https://common-logon-dev.hlth.gov.bc.ca/
    • https://common-logon-dev.hlth.gov.bc.ca/auth
    • https://common-logon-dev.hlth.gov.bc.ca/auth/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account
  • Re-examine Cache-control Directives [10015] total: 3:
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account/
    • https://common-logon-dev.hlth.gov.bc.ca/robots.txt
  • Storable and Cacheable Content [10049] total: 6:
    • https://common-logon-dev.hlth.gov.bc.ca/
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms
    • https://common-logon-dev.hlth.gov.bc.ca/auth/resources/ng78f/welcome/keycloak/css/welcome.css
    • https://common-logon-dev.hlth.gov.bc.ca/auth/resources/ng78f/welcome/keycloak/img/favicon.ico
    • https://common-logon-dev.hlth.gov.bc.ca/robots.txt
    • ..
  • Storable but Non-Cacheable Content [10049] total: 2:
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications
    • https://common-logon-dev.hlth.gov.bc.ca/auth/realms/moh_applications/account/

View the following link to download the report. RunnerID:8850638337

[github-actions[bot]]

• Site: https://common-logon-dev.hlth.gov.bc.ca Resolved Alerts
  • X-Content-Type-Options Header Missing [10021] total: 1:

View the following link to download the report. RunnerID:8945733857