ZAP Full Scan Report

[github-actions[bot]]

• Site: //localhost:8000

• Site: http://localhost:8000 New Alerts

  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • http://localhost:8000/
    • http://localhost:8000/robots.txt
    • http://localhost:8000/sitemap.xml
    • http://localhost:8000/testapp/
  • HTTP Only Site [10106] total: 1:
    • http://localhost:8000
  • Permissions Policy Header Not Set [10063] total: 4:
    • http://localhost:8000/
    • http://localhost:8000/robots.txt
    • http://localhost:8000/sitemap.xml
    • http://localhost:8000/testapp/
  • Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 4:
    • http://localhost:8000/
    • http://localhost:8000/robots.txt
    • http://localhost:8000/sitemap.xml
    • http://localhost:8000/testapp/
  • Storable and Cacheable Content [10049] total: 4:
    • http://localhost:8000/
    • http://localhost:8000/robots.txt
    • http://localhost:8000/sitemap.xml
    • http://localhost:8000/testapp/
  • User Agent Fuzzer [10104] total: 12:
    • http://localhost:8000/testapp
    • http://localhost:8000/testapp
    • http://localhost:8000/testapp
    • http://localhost:8000/testapp
    • http://localhost:8000/testapp
    • ..

View the following link to download the report. RunnerID:8197506938

[github-actions[bot]]

• Site: //localhost:8000

• Site: http://localhost:8000 New Alerts

  • Absence of Anti-CSRF Tokens [10202] total: 1:
    • http://localhost:8000/testapp/
  • Anti-CSRF Tokens Check [20012] total: 1:
    • http://localhost:8000/testapp/
  • Source Code Disclosure - SQL [10099] total: 1:
    • http://localhost:8000/testapp/
  • Application Error Disclosure [90022] total: 1:
    • http://localhost:8000/testapp/
  • Modern Web Application [10109] total: 1:
    • http://localhost:8000/testapp/

View the following link to download the report. RunnerID:8197785810

[github-actions[bot]]

• Site: //localhost:8000

• Site: http://localhost:8000 Resolved Alerts

  • Absence of Anti-CSRF Tokens [10202] total: 1:
  • Anti-CSRF Tokens Check [20012] total: 1:
  • Source Code Disclosure - SQL [10099] total: 1:
  • Application Error Disclosure [90022] total: 1:
  • Modern Web Application [10109] total: 1:

View the following link to download the report. RunnerID:8198768813

[github-actions[bot]]

• Site: //localhost:8000

• Site: http://localhost:8000 Resolved Alerts

  • User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:8205645655