not-gov.uk: ZAP Scan Report (baseline) - Githubissues

daniel-ac-martin / NotGovUK

An implementation of the GOV.UK Design System in React that provides support for writing internal applications in addition to public ones.

https://not-gov.uk/

MIT License

27 stars 8 forks source link

not-gov.uk: ZAP Scan Report (baseline) #984

Open github-actions[bot] opened 1 month ago

github-actions[bot] commented 1 month ago

Site: https://not-gov.uk New Alerts
- Modern Web Application [10109] total: 12:
- Dangerous JS Functions [10110] total: 0:
- Permissions Policy Header Not Set [10063] total: 0:
- Source Code Disclosure - SQL [10099] total: 0:
- X-Content-Type-Options Header Missing [10021] total: 0:
  
  Ignored Alerts
- Absence of Anti-CSRF Tokens [10202] total: 11:
- CSP: style-src unsafe-inline [10055] total: 7:
- CSP: Notices [10055] total: 7:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Retrieved from Cache [10050] total: 11:
- Storable and Cacheable Content [10049] total: 11:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 16:
- Timestamp Disclosure - Unix [10096] total: 0:

View the following link to download the report. RunnerID:9270402994

ZAP is supported by the Crash Override Open Source Fellowship