ZAP Scan Baseline Report

[github-actions[bot]]

• Site: https://poc-map-bakso.hamdan.id New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 3:
    • https://poc-map-bakso.hamdan.id/
    • https://poc-map-bakso.hamdan.id/robots.txt
    • https://poc-map-bakso.hamdan.id/sitemap.xml
  • Cross-Domain Misconfiguration [10098] total: 11:
    • https://poc-map-bakso.hamdan.id/
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/webpack-e9359bf7233c05a9.js
    • https://poc-map-bakso.hamdan.id/_next/static/css/addc19b4eb28900e.css
    • https://poc-map-bakso.hamdan.id/_next/static/css/b5108eac0ae4b2e6.css
    • https://poc-map-bakso.hamdan.id/_next/static/media/0484562807a97172-s.p.woff2
    • ..
  • Missing Anti-clickjacking Header [10020] total: 1:
    • https://poc-map-bakso.hamdan.id/
  • Permissions Policy Header Not Set [10063] total: 11:
    • https://poc-map-bakso.hamdan.id/
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/457b8330-2d7222fa4265762d.js
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/644-d5c41d018c4f6916.js
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/app/layout-d4ba732bcb2cf8fb.js
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/app/page-72d991adbe846d3f.js
    • ..
  • Timestamp Disclosure - Unix [10096] total: 9:
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/786-d0f5cd909cd8c81d.js
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/786-d0f5cd909cd8c81d.js
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/786-d0f5cd909cd8c81d.js
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/786-d0f5cd909cd8c81d.js
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/786-d0f5cd909cd8c81d.js
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • https://poc-map-bakso.hamdan.id/
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/457b8330-2d7222fa4265762d.js
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/webpack-e9359bf7233c05a9.js
    • https://poc-map-bakso.hamdan.id/_next/static/css/addc19b4eb28900e.css
    • https://poc-map-bakso.hamdan.id/_next/static/css/b5108eac0ae4b2e6.css
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/117-2ae04ef58b75d465.js
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/117-2ae04ef58b75d465.js
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/457b8330-2d7222fa4265762d.js
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/644-d5c41d018c4f6916.js
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/786-d0f5cd909cd8c81d.js
    • ..
  • Modern Web Application [10109] total: 3:
    • https://poc-map-bakso.hamdan.id/
    • https://poc-map-bakso.hamdan.id/robots.txt
    • https://poc-map-bakso.hamdan.id/sitemap.xml
  • Re-examine Cache-control Directives [10015] total: 1:
    • https://poc-map-bakso.hamdan.id/
  • Retrieved from Cache [10050] total: 11:
    • https://poc-map-bakso.hamdan.id/
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/webpack-e9359bf7233c05a9.js
    • https://poc-map-bakso.hamdan.id/_next/static/css/addc19b4eb28900e.css
    • https://poc-map-bakso.hamdan.id/_next/static/media/0484562807a97172-s.p.woff2
    • https://poc-map-bakso.hamdan.id/_next/static/media/83011b312d4f501e-s.p.woff
    • ..
  • Storable and Cacheable Content [10049] total: 7:
    • https://poc-map-bakso.hamdan.id/_next/static/chunks/webpack-e9359bf7233c05a9.js
    • https://poc-map-bakso.hamdan.id/_next/static/css/addc19b4eb28900e.css
    • https://poc-map-bakso.hamdan.id/_next/static/media/0484562807a97172-s.p.woff2
    • https://poc-map-bakso.hamdan.id/_next/static/media/83011b312d4f501e-s.p.woff
    • https://poc-map-bakso.hamdan.id/_next/static/media/8888a3826f4a3af4-s.p.woff2
    • ..
  • Storable but Non-Cacheable Content [10049] total: 4:
    • https://poc-map-bakso.hamdan.id/
    • https://poc-map-bakso.hamdan.id/favicon.ico
    • https://poc-map-bakso.hamdan.id/robots.txt
    • https://poc-map-bakso.hamdan.id/sitemap.xml

View the following link to download the report. RunnerID:11589832119

---

ZAP by Checkmarx

[github-actions[bot]]

• Site: https://poc-map-bakso.hamdan.id New Alerts

  • CSP: script-src unsafe-eval [10055] total: 3:
    • https://poc-map-bakso.hamdan.id/
    • https://poc-map-bakso.hamdan.id/robots.txt
    • https://poc-map-bakso.hamdan.id/sitemap.xml
  • CSP: script-src unsafe-inline [10055] total: 3:
    • https://poc-map-bakso.hamdan.id/
    • https://poc-map-bakso.hamdan.id/robots.txt
    • https://poc-map-bakso.hamdan.id/sitemap.xml

  • CSP: style-src unsafe-inline [10055] total: 3:

    • https://poc-map-bakso.hamdan.id/
    • https://poc-map-bakso.hamdan.id/robots.txt
    • https://poc-map-bakso.hamdan.id/sitemap.xml

    Resolved Alerts

  • Content Security Policy (CSP) Header Not Set [10038] total: 3:
  • Missing Anti-clickjacking Header [10020] total: 1:

View the following link to download the report. RunnerID:11605502813

[github-actions[bot]]

• Site: https://poc-map-bakso.hamdan.id Resolved Alerts
  • Permissions Policy Header Not Set [10063] total: 11:
  • X-Content-Type-Options Header Missing [10021] total: 11:

View the following link to download the report. RunnerID:11605624822

[github-actions[bot]]

• Site: https://poc-map-bakso.hamdan.id Resolved Alerts
  • Re-examine Cache-control Directives [10015] total: 1:

View the following link to download the report. RunnerID:11626166083

[github-actions[bot]]

• Site: https://poc-map-bakso.hamdan.id New Alerts
  • Re-examine Cache-control Directives [10015] total: 1:
    • https://poc-map-bakso.hamdan.id/

View the following link to download the report. RunnerID:11626565984

[github-actions[bot]]

• Site: https://poc-map-bakso.hamdan.id Resolved Alerts
  • Re-examine Cache-control Directives [10015] total: 1:

View the following link to download the report. RunnerID:11966180607

[github-actions[bot]]

• Site: https://poc-map-bakso.hamdan.id New Alerts
  • Re-examine Cache-control Directives [10015] total: 1:
    • https://poc-map-bakso.hamdan.id/

View the following link to download the report. RunnerID:11966185552