ZAP Scan Baseline Report

[github-actions[bot]]

• Site: https://docs.italia.it New Alerts
  • Modern Web Application [10109] total: 11:
    • https://docs.italia.it/privacy-policy/
    • https://docs.italia.it/note-legali/
    • https://docs.italia.it/
    • https://docs.italia.it/che-cos-e-docs-italia/
    • https://docs.italia.it/cookies-policy/
    • ..
  • Reverse Tabnabbing [10108] total: 11:
    • https://docs.italia.it/cookies-policy/
    • https://docs.italia.it/accounts/login/
    • https://docs.italia.it/search/
    • https://docs.italia.it/note-legali/
    • https://docs.italia.it/
    • ..
  • Timestamp Disclosure - Unix [10096] total: 5:
    • https://docs.italia.it/
    • https://docs.italia.it/sustainability/click/
    • https://docs.italia.it/builds/
    • https://docs.italia.it/search/
    • https://docs.italia.it/api/
  • Cookie Without Secure Flag [10011] total: 13:
    • https://docs.italia.it/accounts/signup/
    • https://docs.italia.it/accounts/github/login/?process=login
    • https://docs.italia.it/privacy-policy/?autocompleteSearchFullScreen
    • https://docs.italia.it/come-pubblicare/?autocompleteSearchFullScreen
    • https://docs.italia.it/accounts/login/
    • ..
  • Content Security Policy (CSP) Header Not Set [10038] total: 11:
    • https://docs.italia.it/accounts/login/
    • https://docs.italia.it/search/
    • https://docs.italia.it/cookies-policy/
    • https://docs.italia.it/builds/
    • https://docs.italia.it/sustainability/click/
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 12:
    • https://docs.italia.it/media/javascript/elastic-search.js
    • https://docs.italia.it/media/javascript/overlay-search.js
    • https://docs.italia.it/media/javascript/searchbar.js
    • https://docs.italia.it/media/static/vendor/jquery-ui.js
    • https://docs.italia.it/media/javascript/base.js
    • ..
  • Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 11:
    • https://docs.italia.it/note-legali/
    • https://docs.italia.it/
    • https://docs.italia.it/che-cos-e-docs-italia/
    • https://docs.italia.it/accounts/login/
    • https://docs.italia.it/come-pubblicare/
    • ..
  • Cross-Domain Misconfiguration [10098] total: 12:
    • https://docs.italia.it/media/docsitalia/icons/safari-pinned-tab.svg
    • https://docs.italia.it/media/static/vendor/bootstrap-italia/js/bootstrap-italia.min.js
    • https://docs.italia.it/media/docsitalia/icons/favicon-32x32.png
    • https://docs.italia.it/media/static/vendor/bootstrap-italia/css/bootstrap-italia.min.css
    • https://docs.italia.it/media/docsitalia/icons/favicon-16x16.png
    • ..
  • Absence of Anti-CSRF Tokens [10202] total: 10:
    • https://docs.italia.it/come-pubblicare/
    • https://docs.italia.it/api/
    • https://docs.italia.it/che-cos-e-docs-italia/
    • https://docs.italia.it/accounts/login/
    • https://docs.italia.it/sustainability/click/
    • ..
  • Private IP Disclosure [2] total: 12:
    • https://docs.italia.it/AgID/documenti-in-consultazione/lg-cert-regionali/it/bozza/introduzione.html
    • https://docs.italia.it/AgID/documenti-in-consultazione/lg-cert-regionali/it/bozza/modello-amministrativo.html
    • https://docs.italia.it/AgID/documenti-in-consultazione/lg-cert-regionali/it/bozza/servizi.html
    • https://docs.italia.it/AgID/documenti-in-consultazione/lg-cert-regionali/it/bozza/contesto.html
    • https://docs.italia.it/AgID/documenti-in-consultazione/lg-cert-regionali/it/bozza/index.html%23forum-italia-comments-%7B%7B%20topicId%20%7D%7D
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 12:
    • https://docs.italia.it/media/docsitalia/icons/favicon.ico
    • https://docs.italia.it/media/docsitalia/css/core.css
    • https://docs.italia.it/media/static/vendor/jquery.js
    • https://docs.italia.it/media/static/vendor/jquery-migrate.js
    • https://docs.italia.it/media/docsitalia/icons/safari-pinned-tab.svg
    • ..
  • Strict-Transport-Security Header Not Set [10035] total: 11:
    • https://docs.italia.it/api/
    • https://docs.italia.it/sitemap.xml
    • https://docs.italia.it/privacy-policy/
    • https://docs.italia.it/sustainability/click/
    • https://docs.italia.it/search/
    • ..
  • Vulnerable JS Library [10003] total: 12:
    • https://docs.italia.it/italia/daf/daf-docs/en/bozza/_static/js/theme.js
    • https://docs.italia.it/italia/designers-italia/design-comuni-docs/it/stabile/_static/js/theme.js
    • https://docs.italia.it/italia/daf/daf-piano-di-sviluppo/it/bozza/_static/js/theme.js
    • https://docs.italia.it/italia/piano-triennale-ict/cloud-docs/it/stabile/_static/js/theme.js
    • https://docs.italia.it/italia/piano-triennale-ict/pianotriennale-ict-doc/it/2020-2022/_static/js/theme.js
    • ..
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 12:
    • https://docs.italia.it/italia/piano-triennale-ict/codice-amministrazione-digitale-docs/it/v2018-09-28/search.html?area=default&check_keywords=yes&q=ZAP
    • https://docs.italia.it/italia/cie/cie-middleware-windows-docs/it/bozza/search.html?area=default&check_keywords=yes&q=ZAP
    • https://docs.italia.it/italia/mid/piano-nazionale-innovazione-2025-docs/it/stabile/search.html?area=default&check_keywords=yes&q=ZAP
    • https://docs.italia.it/italia/mid/piano-nazionale-innovazione-2025-docs/it/stabile/search.html?area=default&check_keywords=yes&q=ZAP
    • https://docs.italia.it/italia/piano-triennale-ict/codice-amministrazione-digitale-docs/it/v2017-12-13/search.html?area=default&check_keywords=yes&q=ZAP
    • ..
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 11:
    • https://docs.italia.it/che-cos-e-docs-italia/
    • https://docs.italia.it/come-pubblicare/
    • https://docs.italia.it/api/
    • https://docs.italia.it/privacy-policy/
    • https://docs.italia.it/cookies-policy/
    • ..
  • PII Disclosure [10062] total: 1:
    • https://docs.italia.it/media/htmlzip/codice-amministrazione-digitale-docs/v2017-12-13/codice-amministrazione-digitale-docs.zip
  • Application Error Disclosure [90022] total: 1:
    • https://docs.italia.it/converti/
  • Cookie Without SameSite Attribute [10054] total: 13:
    • https://docs.italia.it/come-pubblicare/?autocompleteSearchFullScreen
    • https://docs.italia.it/privacy-policy/?autocompleteSearchFullScreen
    • https://docs.italia.it/accounts/signup/
    • https://docs.italia.it/accounts/login/
    • https://docs.italia.it/accounts/password/reset/
    • ..

View the following link to download the report. RunnerID:560990500

[github-actions[bot]]

• Site: https://docs.italia.it Resolved Alerts
  • PII Disclosure [10062] total: 1:

View the following link to download the report. RunnerID:563705811

[github-actions[bot]]

• Site: https://docs.italia.it New Alerts
  • PII Disclosure [10062] total: 1:
    • https://docs.italia.it/media/htmlzip/codice-amministrazione-digitale-docs/v2017-12-13/codice-amministrazione-digitale-docs.zip

View the following link to download the report. RunnerID:578101682

[github-actions[bot]]

• Site: https://docs.italia.it Resolved Alerts
  • PII Disclosure [10062] total: 1:

View the following link to download the report. RunnerID:620980255

[github-actions[bot]]

• Site: https://docs.italia.it New Alerts
  • PII Disclosure [10062] total: 1:
    • https://docs.italia.it/media/htmlzip/codice-amministrazione-digitale-docs/v2017-12-13/codice-amministrazione-digitale-docs.zip

View the following link to download the report. RunnerID:624409666

[github-actions[bot]]

• Site: https://docs.italia.it Resolved Alerts
  • PII Disclosure [10062] total: 1:

View the following link to download the report. RunnerID:667925761

[github-actions[bot]]

• Site: https://docs.italia.it New Alerts
  • PII Disclosure [10062] total: 2:
    • https://docs.italia.it/media/htmlzip/codice-amministrazione-digitale-docs/v2017-12-13/codice-amministrazione-digitale-docs.zip
    • https://docs.italia.it/media/htmlzip/docs-italia-guide/bozza/docs-italia-guide.zip

View the following link to download the report. RunnerID:670794538

[github-actions[bot]]

• Site: https://docs.italia.it Resolved Alerts
  • PII Disclosure [10062] total: 2:

View the following link to download the report. RunnerID:673108332

[github-actions[bot]]

• Site: https://docs.italia.it New Alerts
  • PII Disclosure [10062] total: 1:
    • https://docs.italia.it/media/htmlzip/codice-amministrazione-digitale-docs/v2017-12-13/codice-amministrazione-digitale-docs.zip

View the following link to download the report. RunnerID:682969598

[github-actions[bot]]

• Site: https://docs.italia.it Resolved Alerts
  • PII Disclosure [10062] total: 1:

View the following link to download the report. RunnerID:686440060

[github-actions[bot]]

• Site: https://docs.italia.it New Alerts
  • PII Disclosure [10062] total: 2:
    • https://docs.italia.it/media/htmlzip/codice-amministrazione-digitale-docs/v2017-12-13/codice-amministrazione-digitale-docs.zip
    • https://docs.italia.it/media/htmlzip/docs-italia-guide/bozza/docs-italia-guide.zip

View the following link to download the report. RunnerID:692771519

[github-actions[bot]]

• Site: https://docs.italia.it Resolved Alerts
  • PII Disclosure [10062] total: 2:

View the following link to download the report. RunnerID:695016157

[github-actions[bot]]

• Site: https://docs.italia.it New Alerts
  • PII Disclosure [10062] total: 2:
    • https://docs.italia.it/media/htmlzip/codice-amministrazione-digitale-docs/v2017-12-13/codice-amministrazione-digitale-docs.zip
    • https://docs.italia.it/media/htmlzip/docs-italia-guide/bozza/docs-italia-guide.zip

View the following link to download the report. RunnerID:697772751

[github-actions[bot]]

• Site: https://docs.italia.it Resolved Alerts
  • PII Disclosure [10062] total: 2:

View the following link to download the report. RunnerID:704900855

[github-actions[bot]]

• Site: https://docs.italia.it New Alerts
  • PII Disclosure [10062] total: 1:
    • https://docs.italia.it/media/htmlzip/codice-amministrazione-digitale-docs/v2017-12-13/codice-amministrazione-digitale-docs.zip

View the following link to download the report. RunnerID:708446182

[github-actions[bot]]

• Site: https://docs.italia.it Resolved Alerts
  • PII Disclosure [10062] total: 1:

View the following link to download the report. RunnerID:711607569

[github-actions[bot]]

• Site: https://docs.italia.it New Alerts
  • PII Disclosure [10062] total: 1:
    • https://docs.italia.it/media/htmlzip/codice-amministrazione-digitale-docs/v2017-12-13/codice-amministrazione-digitale-docs.zip

View the following link to download the report. RunnerID:714262235

[github-actions[bot]]

• Site: https://docs.italia.it Resolved Alerts
  • PII Disclosure [10062] total: 1:

View the following link to download the report. RunnerID:725932127

[github-actions[bot]]

• Site: https://docs.italia.it New Alerts
  • PII Disclosure [10062] total: 3:
    • https://docs.italia.it/media/htmlzip/codice-amministrazione-digitale-docs/v2017-12-13/codice-amministrazione-digitale-docs.zip
    • https://docs.italia.it/media/htmlzip/docs-italia-guide/bozza/docs-italia-guide.zip
    • https://docs.italia.it/media/htmlzip/codice-amministrazione-digitale-docs/v2018-09-28/codice-amministrazione-digitale-docs.zip

View the following link to download the report. RunnerID:729454402

[github-actions[bot]]

• Site: https://docs.italia.it Resolved Alerts
  • PII Disclosure [10062] total: 3:

View the following link to download the report. RunnerID:732967770

[github-actions[bot]]

• Site: https://docs.italia.it New Alerts
  • PII Disclosure [10062] total: 1:
    • https://docs.italia.it/media/htmlzip/codice-amministrazione-digitale-docs/v2017-12-13/codice-amministrazione-digitale-docs.zip

View the following link to download the report. RunnerID:748233915