ZAP API Scan Report

[github-actions[bot]]

• Site: https://content-signature-2.cdn.mozilla.net New Alerts

  • Unexpected Content-Type was returned [100001] total: 1:
    • https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-07-21-07-25-02.chain

• Site: https://mtlx-cdp-api.azure-api.net New Alerts

  • A Client Error response code was returned by the server [100000] total: 12:
    • https://mtlx-cdp-api.azure-api.net
    • https://mtlx-cdp-api.azure-api.net/
    • https://mtlx-cdp-api.azure-api.net/.htaccess
    • https://mtlx-cdp-api.azure-api.net/3467370086843815258
    • https://mtlx-cdp-api.azure-api.net/casemngt
    • ..

View the following link to download the report. RunnerID:2461396923

[github-actions[bot]]

• Site: https://ftp.mozilla.org New Alerts

  • Unexpected Content-Type was returned [100001] total: 1:
    • https://ftp.mozilla.org/pub/system-addons/webcompat-release-hotfix/webcompat-release-hotfix-100.2.1-build1/webcompat.xpi

• Site: https://aus5.mozilla.org New Alerts

  • Unexpected Content-Type was returned [100001] total: 1:
    • https://aus5.mozilla.org/update/3/SystemAddons/100.0.2/20220519220738/Linux_x86_64-gcc3/null/release-cck-ubuntu/Linux%205.13.0-44-generic%20(GTK%203.24.20%2Clibpulse%20not-available)/canonical/1.0/update.xml

• Site: https://firefox-settings-attachments.cdn.mozilla.net New Alerts

  • Unexpected Content-Type was returned [100001] total: 1380:
    • https://firefox-settings-attachments.cdn.mozilla.net/security-state-staging/intermediates/002c6e58-6238-435b-9b0d-7b0691d17ed4.pem
    • https://firefox-settings-attachments.cdn.mozilla.net/security-state-staging/intermediates/00575f53-f32f-4c7d-8588-1006e713455a.pem
    • https://firefox-settings-attachments.cdn.mozilla.net/security-state-staging/intermediates/007ae41e-e2a4-4671-8841-b6c69a70cb76.pem
    • https://firefox-settings-attachments.cdn.mozilla.net/security-state-staging/intermediates/00bf4a30-9a87-4885-a9ec-6c5c8d3d8a9a.pem
    • https://firefox-settings-attachments.cdn.mozilla.net/security-state-staging/intermediates/00c1f21f-a695-478a-9e33-19d48f9525d8.pem
    • ..

• Site: https://camo.githubusercontent.com New Alerts

  • Unexpected Content-Type was returned [100001] total: 31:
    • https://camo.githubusercontent.com/045daee72a86488122eeca379be5ebdd9624d41a80bafc66cd1db4d1c8bb6271/68747470733a2f2f626573747072616374696365732e636f7265696e6672617374727563747572652e6f72672f70726f6a656374732f3232332f6261646765
    • https://camo.githubusercontent.com/04f1b7f84c8f52d327dfb0b3659b0d9191fb132ef216967fc147882632022d9e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f636f6e7472696275746f72732f626b696d6d696e6963682f6a756963652d73686f702e737667
    • https://camo.githubusercontent.com/05a23ec5fcad99b5d77623403831282b1f208b4cc626f5d745706143f0c8f9f8/68747470733a2f2f696d616765732e6d6963726f6261646765722e636f6d2f6261646765732f76657273696f6e2f626b696d6d696e6963682f6a756963652d73686f702e737667
    • https://camo.githubusercontent.com/14e985a9c0defc0b4aea1fca53bb0a1c69d3e20a86e927e9c918c2fd68fb2c07/68747470733a2f2f6170692e636f6465636c696d6174652e636f6d2f76312f6261646765732f36323036633866333937326263633937613033332f6d61696e7461696e6162696c697479
    • https://camo.githubusercontent.com/15a1e6a07b302c75d9edfcc4069097e63c88b78ba924856c1af33f25661a2139/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f7061636b6167652d6a736f6e2f6f732f626b696d6d696e6963682f6a756963652d73686f70
    • ..
  • A Client Error response code was returned by the server [100000] total: 2:
    • https://camo.githubusercontent.com/05a23ec5fcad99b5d77623403831282b1f208b4cc626f5d745706143f0c8f9f8/68747470733a2f2f696d616765732e6d6963726f6261646765722e636f6d2f6261646765732f76657273696f6e2f626b696d6d696e6963682f6a756963652d73686f702e737667
    • https://camo.githubusercontent.com/67ffe65708e7bf822c5edcc730bed79cfc61cbb8a036d361f140648626df950a/68747470733a2f2f696d616765732e6d6963726f6261646765722e636f6d2f6261646765732f696d6167652f626b696d6d696e6963682f6a756963652d73686f702e737667

• Site: https://raw.githubusercontent.com New Alerts

  • Unexpected Content-Type was returned [100001] total: 3:
    • https://raw.githubusercontent.com/bkimminich/juice-shop/master/frontend/src/assets/public/images/JuiceShop_Logo_400px.png
    • https://raw.githubusercontent.com/bkimminich/pwning-juice-shop/master/cover_small.jpg
    • https://raw.githubusercontent.com/juice-shop/juice-shop/master/frontend/src/assets/public/images/JuiceShop_Logo_100px.png

• Site: https://avatars.githubusercontent.com New Alerts

  • Unexpected Content-Type was returned [100001] total: 12:
    • https://avatars.githubusercontent.com/in/505?s=64&v=4
    • https://avatars.githubusercontent.com/u/13718901?s=64&v=4
    • https://avatars.githubusercontent.com/u/18336861?s=64&v=4
    • https://avatars.githubusercontent.com/u/20478531?s=64&v=4
    • https://avatars.githubusercontent.com/u/30633088?s=64&v=4
    • ..

• Site: https://github.githubassets.com New Alerts

  • Unexpected Content-Type was returned [100001] total: 43:
    • https://github.githubassets.com/assets/app_assets_modules_github_behaviors_details_ts-app_assets_modules_github_behaviors_include-fr-34e1f7-9acce10f39d4.js
    • https://github.githubassets.com/assets/app_assets_modules_github_behaviors_keyboard-shortcuts-helper_ts-app_assets_modules_github_be-af52ef-da1b18076287.js
    • https://github.githubassets.com/assets/app_assets_modules_github_behaviors_pjax_ts-df5f1259840c.js
    • https://github.githubassets.com/assets/app_assets_modules_github_fetch_ts-app_assets_modules_github_form_ts-app_assets_modules_githu-dec477-7b52a85452e9.js
    • https://github.githubassets.com/assets/behaviors-c3fb760ff2b0.js
    • ..

• Site: https://github.com New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:
    • https://github.com/bkimminich/juice-shop
    • https://github.com/juice-shop/juice-shop

• Site: https://content-signature-2.cdn.mozilla.net

• Site: https://fonts.googleapis.com New Alerts

  • Unexpected Content-Type was returned [100001] total: 1:
    • https://fonts.googleapis.com/icon?family=Material+Icons

• Site: http://cdnjs.cloudflare.com New Alerts

  • Unexpected Content-Type was returned [100001] total: 3:
    • http://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.css
    • http://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.js
    • http://cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js

• Site: http://owasp-juice-shop-228.herokuapp.com New Alerts

  • Unexpected Content-Type was returned [100001] total: 283:

    • http://owasp-juice-shop-228.herokuapp.com
    • http://owasp-juice-shop-228.herokuapp.com/
    • http://owasp-juice-shop-228.herokuapp.com/%7B%7B%202%20%7D%7D
    • http://owasp-juice-shop-228.herokuapp.com/.htaccess
    • http://owasp-juice-shop-228.herokuapp.com/2229905558463835805
    • ..

    Ignored Alerts

  • Content Security Policy (CSP) Header Not Set [10038] total: 1:
  • Cross-Domain Misconfiguration [10098] total: 1:
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 2:
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 1:

View the following link to download the report. RunnerID:2462183500

[github-actions[bot]]

• Site: http://owasp-juice-shop-228.herokuapp.com Ignored Alerts
  • Sub Resource Integrity Attribute Missing [90003] total: 1:
  • Permissions Policy Header Not Set [10063] total: 1:
  • Modern Web Application [10109] total: 1:
  • Storable but Non-Cacheable Content [10049] total: 1:

View the following link to download the report. RunnerID:2467473436

[github-actions[bot]]

• Site: http://10.0.4.240:3000 New Alerts

  • Unexpected Content-Type was returned [100001] total: 4:

    • http://10.0.4.240:3000
    • http://10.0.4.240:3000/
    • http://10.0.4.240:3000/1342238589952798076
    • http://10.0.4.240:3000/8667556420408985412

    Ignored Alerts

  • Content Security Policy (CSP) Header Not Set [10038] total: 1:
  • Cross-Domain Misconfiguration [10098] total: 1:
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 2:
  • Deprecated Feature Policy Header Set [10063] total: 1:
  • Modern Web Application [10109] total: 1:
  • Storable but Non-Cacheable Content [10049] total: 1:

View the following link to download the report. RunnerID:2468655881

[github-actions[bot]]

• Site: http://owasp-juice-shop-228.herokuapp.com New Alerts

  • Unexpected Content-Type was returned [100001] total: 4:

    • http://owasp-juice-shop-228.herokuapp.com
    • http://owasp-juice-shop-228.herokuapp.com/
    • http://owasp-juice-shop-228.herokuapp.com/5221367115237413965
    • http://owasp-juice-shop-228.herokuapp.com/6027917899468407385

    Ignored Alerts

  • Content Security Policy (CSP) Header Not Set [10038] total: 1:
  • Cross-Domain Misconfiguration [10098] total: 1:
  • Sub Resource Integrity Attribute Missing [90003] total: 1:
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 2:
  • Permissions Policy Header Not Set [10063] total: 1:
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 1:
  • Modern Web Application [10109] total: 1:
  • Storable but Non-Cacheable Content [10049] total: 1:

View the following link to download the report. RunnerID:2468674606