ZAP Scan Baseline Report

github-actions[bot] commented 3 weeks ago

Site: https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- Missing Anti-clickjacking Header [10020] total: 1:
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca
- Sub Resource Integrity Attribute Missing [90003] total: 1:
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca
- In Page Banner Information Leak [10009] total: 2:
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca/robots.txt
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca/sitemap.xml
- Permissions Policy Header Not Set [10063] total: 5:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 11:
- Timestamp Disclosure - Unix [10096] total: 18:
- Information Disclosure - Suspicious Comments [10027] total: 9:
- Modern Web Application [10109] total: 1:
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca
- Re-examine Cache-control Directives [10015] total: 2:
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json
- Storable and Cacheable Content [10049] total: 11:

View the following link to download the report. RunnerID:11603833057

ZAP by Checkmarx

github-actions[bot] commented 2 weeks ago

Site: https://wps-prod.apps.silver.devops.gov.bc.ca New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- Missing Anti-clickjacking Header [10020] total: 1:
  - https://wps-prod.apps.silver.devops.gov.bc.ca/
- Sub Resource Integrity Attribute Missing [90003] total: 1:
  - https://wps-prod.apps.silver.devops.gov.bc.ca/
- Cookie with SameSite Attribute None [10054] total: 1:
  - https://wps-prod.apps.silver.devops.gov.bc.ca/
- In Page Banner Information Leak [10009] total: 2:
  - https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt
  - https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml
- Permissions Policy Header Not Set [10063] total: 5:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 11:
- Strict-Transport-Security Header Not Set [10035] total: 11:
- Timestamp Disclosure - Unix [10096] total: 18:
- Information Disclosure - Suspicious Comments [10027] total: 9:
- Modern Web Application [10109] total: 1:
  - https://wps-prod.apps.silver.devops.gov.bc.ca/
- Non-Storable Content [10049] total: 1:
  - https://wps-prod.apps.silver.devops.gov.bc.ca/
- Re-examine Cache-control Directives [10015] total: 2:
  - https://wps-prod.apps.silver.devops.gov.bc.ca/
  - https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json
- Session Management Response Identified [10112] total: 3:
- Storable and Cacheable Content [10049] total: 10:

View the following link to download the report. RunnerID:11647748749

github-actions[bot] commented 2 weeks ago

Site: https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca/sitemap.xml
- Missing Anti-clickjacking Header [10020] total: 1:
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca
- Sub Resource Integrity Attribute Missing [90003] total: 1:
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca
- In Page Banner Information Leak [10009] total: 2:
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca/robots.txt
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca/sitemap.xml
- Permissions Policy Header Not Set [10063] total: 5:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 11:
- Timestamp Disclosure - Unix [10096] total: 18:
- Information Disclosure - Suspicious Comments [10027] total: 9:
- Modern Web Application [10109] total: 1:
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca
- Re-examine Cache-control Directives [10015] total: 2:
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json
- Storable and Cacheable Content [10049] total: 11:

View the following link to download the report. RunnerID:11668615469

github-actions[bot] commented 2 weeks ago

Site: https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- Missing Anti-clickjacking Header [10020] total: 1:
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca
- Sub Resource Integrity Attribute Missing [90003] total: 1:
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca
- In Page Banner Information Leak [10009] total: 2:
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca/robots.txt
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca/sitemap.xml
- Permissions Policy Header Not Set [10063] total: 5:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 11:
- Timestamp Disclosure - Unix [10096] total: 18:
- Information Disclosure - Suspicious Comments [10027] total: 9:
- Modern Web Application [10109] total: 1:
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca
- Re-examine Cache-control Directives [10015] total: 2:
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json
- Storable and Cacheable Content [10049] total: 11:

View the following link to download the report. RunnerID:11669035104

github-actions[bot] commented 2 weeks ago

Site: https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- Missing Anti-clickjacking Header [10020] total: 1:
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca
- Sub Resource Integrity Attribute Missing [90003] total: 1:
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca
- In Page Banner Information Leak [10009] total: 2:
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca/robots.txt
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca/sitemap.xml
- Permissions Policy Header Not Set [10063] total: 5:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 11:
- Timestamp Disclosure - Unix [10096] total: 18:
- Information Disclosure - Suspicious Comments [10027] total: 9:
- Modern Web Application [10109] total: 1:
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca
- Re-examine Cache-control Directives [10015] total: 2:
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json
- Storable and Cacheable Content [10049] total: 11:

View the following link to download the report. RunnerID:11670419029

github-actions[bot] commented 2 weeks ago

Site: https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- Missing Anti-clickjacking Header [10020] total: 1:
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca
- Sub Resource Integrity Attribute Missing [90003] total: 1:
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca
- In Page Banner Information Leak [10009] total: 2:
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca/robots.txt
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca/sitemap.xml
- Permissions Policy Header Not Set [10063] total: 5:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 11:
- Timestamp Disclosure - Unix [10096] total: 18:
- Information Disclosure - Suspicious Comments [10027] total: 9:
- Modern Web Application [10109] total: 1:
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca
- Re-examine Cache-control Directives [10015] total: 2:
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json
- Storable and Cacheable Content [10049] total: 11:

View the following link to download the report. RunnerID:11671773885

github-actions[bot] commented 2 weeks ago

Site: https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca Resolved Alerts
- Missing Anti-clickjacking Header [10020] total: 1:

View the following link to download the report. RunnerID:11673442514

github-actions[bot] commented 2 weeks ago

Site: https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca New Alerts
- Missing Anti-clickjacking Header [10020] total: 1:
  - https://wps-pr-4042-e1e498-dev.apps.silver.devops.gov.bc.ca

View the following link to download the report. RunnerID:11673696213

github-actions[bot] commented 2 weeks ago

Site: https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- Missing Anti-clickjacking Header [10020] total: 1:
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca
- Sub Resource Integrity Attribute Missing [90003] total: 1:
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca
- In Page Banner Information Leak [10009] total: 2:
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca/robots.txt
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca/sitemap.xml
- Permissions Policy Header Not Set [10063] total: 5:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 11:
- Timestamp Disclosure - Unix [10096] total: 18:
- Information Disclosure - Suspicious Comments [10027] total: 9:
- Modern Web Application [10109] total: 1:
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca
- Re-examine Cache-control Directives [10015] total: 2:
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca
  - https://wps-pr-4054-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json
- Storable and Cacheable Content [10049] total: 11:

View the following link to download the report. RunnerID:11671282201

bcgov / wps

ZAP Scan Baseline Report #4052