ZAP: rctool - Githubissues

github-actions[bot] commented 6 months ago

Site: https://nr-hydrometric-rating-curve-test-test-frontend.apps.silver.devops.gov.bc.ca New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 4:
- Permissions Policy Header Not Set [10063] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 4:
- Non-Storable Content [10049] total: 4:
- Sec-Fetch-Dest Header is Missing [90005] total: 3:
- Sec-Fetch-Mode Header is Missing [90005] total: 3:
- Sec-Fetch-Site Header is Missing [90005] total: 3:
- Sec-Fetch-User Header is Missing [90005] total: 3:

View the following link to download the report. RunnerID:8244523961

github-actions[bot] commented 5 months ago

Site: https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca New Alerts

View the following link to download the report. RunnerID:8806683990

github-actions[bot] commented 4 months ago

Site: https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca New Alerts
- Bypassing 403 [40038] total: 1:
  - https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/rctool/develop/initialize
- Application Error Disclosure [90022] total: 1:
  - https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/rctool/develop/initialize
  Resolved Alerts
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 4:

View the following link to download the report. RunnerID:9118164544

github-actions[bot] commented 4 months ago

Site: https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca Resolved Alerts
- Dangerous JS Functions [10110] total: 1:
- Permissions Policy Header Not Set [10063] total: 11:
- Base64 Disclosure [10094] total: 3:
- Non-Storable Content [10049] total: 2:
- Sec-Fetch-Dest Header is Missing [90005] total: 3:
- Sec-Fetch-Mode Header is Missing [90005] total: 3:
- Sec-Fetch-Site Header is Missing [90005] total: 3:
- Sec-Fetch-User Header is Missing [90005] total: 3:
- Session Management Response Identified [10112] total: 4:
- Storable and Cacheable Content [10049] total: 8:

View the following link to download the report. RunnerID:9235027682

github-actions[bot] commented 4 months ago

Site: https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca New Alerts
- Dangerous JS Functions [10110] total: 1:
  - https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/static/js/jquery.min.js
- Permissions Policy Header Not Set [10063] total: 11:
- Base64 Disclosure [10094] total: 3:
- Non-Storable Content [10049] total: 2:
  - https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca
  - https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/
- Sec-Fetch-Dest Header is Missing [90005] total: 2:
  - https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/
  - https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/
- Sec-Fetch-Mode Header is Missing [90005] total: 2:
  - https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/
  - https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/
- Sec-Fetch-Site Header is Missing [90005] total: 2:
  - https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/
  - https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/
- Sec-Fetch-User Header is Missing [90005] total: 2:
  - https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/
  - https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/
- Session Management Response Identified [10112] total: 4:
- Storable and Cacheable Content [10049] total: 8:

View the following link to download the report. RunnerID:9428264708

github-actions[bot] commented 3 months ago

Site: https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca Resolved Alerts
- Dangerous JS Functions [10110] total: 1:
- Permissions Policy Header Not Set [10063] total: 11:
- Base64 Disclosure [10094] total: 3:
- Non-Storable Content [10049] total: 2:
- Sec-Fetch-Dest Header is Missing [90005] total: 2:
- Sec-Fetch-Mode Header is Missing [90005] total: 2:
- Sec-Fetch-Site Header is Missing [90005] total: 2:
- Sec-Fetch-User Header is Missing [90005] total: 2:
- Session Management Response Identified [10112] total: 4:
- Storable and Cacheable Content [10049] total: 8: