ZAP Scan Baseline Report

[github-actions[bot]]

• Site: https://marllus.com New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 2:
    • https://marllus.com/en/about
    • https://marllus.com/sobre
  • CSP: Wildcard Directive [10055] total: 3:
    • https://marllus.com
    • https://marllus.com/
    • https://marllus.com/contato
  • CSP: script-src unsafe-inline [10055] total: 3:
    • https://marllus.com
    • https://marllus.com/
    • https://marllus.com/contato
  • CSP: style-src unsafe-inline [10055] total: 3:
    • https://marllus.com
    • https://marllus.com/
    • https://marllus.com/contato
  • Content Security Policy (CSP) Header Not Set [10038] total: 1:
    • https://marllus.com/cdn-cgi/l/email-protection
  • Cross-Domain Misconfiguration [10098] total: 12:
    • https://marllus.com
    • https://marllus.com/
    • https://marllus.com/arte/2021/05/16/livro-antologia-poetica.html
    • https://marllus.com/busca
    • https://marllus.com/categories
    • ..
  • Sub Resource Integrity Attribute Missing [90003] total: 10:
    • https://marllus.com
    • https://marllus.com
    • https://marllus.com
    • https://marllus.com
    • https://marllus.com
    • ..
  • Vulnerable JS Library [10003] total: 1:
    • https://marllus.com/assets/js/jquery.min.js
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 12:
    • https://marllus.com
    • https://marllus.com
    • https://marllus.com
    • https://marllus.com
    • https://marllus.com
    • ..
  • Dangerous JS Functions [10110] total: 1:
    • https://marllus.com/assets/js/jquery.min.js
  • Permissions Policy Header Not Set [10063] total: 8:
    • https://marllus.com/assets/js/crypto.min.js
    • https://marllus.com/assets/js/ie10-viewport-bug-workaround.js
    • https://marllus.com/assets/js/jquery.min.js
    • https://marllus.com/assets/js/mediumish.js
    • https://marllus.com/assets/js/openpgp.min.js
    • ..
  • Secure Pages Include Mixed Content [10040] total: 1:
    • https://marllus.com/tecnologia/2016/02/17/resizing-vdisks-vdis-xenserver-6-5
  • Strict-Transport-Security Header Not Set [10035] total: 1:
    • https://marllus.com/cdn-cgi/l/email-protection
  • Timestamp Disclosure - Unix [10096] total: 713:
    • https://marllus.com/assets/js/openpgp.min.js
    • https://marllus.com/assets/js/openpgp.min.js
    • https://marllus.com/assets/js/openpgp.min.js
    • https://marllus.com/assets/js/openpgp.min.js
    • https://marllus.com/assets/js/openpgp.min.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 12:
    • https://marllus.com
    • https://marllus.com
    • https://marllus.com/
    • https://marllus.com/busca
    • https://marllus.com/categories
    • ..
  • Modern Web Application [10109] total: 11:
    • https://marllus.com
    • https://marllus.com/
    • https://marllus.com/busca
    • https://marllus.com/categories
    • https://marllus.com/contato
    • ..
  • Non-Storable Content [10049] total: 5:
    • https://marllus.com/arte/2021/05/16/livro-antologia-poetica.html
    • https://marllus.com/en
    • https://marllus.com/tecnologia/2016/02/17/importacaoexportacao-de-vms-no-xenserver-6-5.html
    • https://marllus.com/tecnologia/2016/02/17/resizing-vdisks-vdis-xenserver-6-5.html
    • https://marllus.com/tecnologia/2020/06/07/pgp-form.html
  • Re-examine Cache-control Directives [10015] total: 12:
    • https://marllus.com
    • https://marllus.com/
    • https://marllus.com/busca
    • https://marllus.com/categories
    • https://marllus.com/contato
    • ..
  • Storable and Cacheable Content [10049] total: 1:
    • https://marllus.com/robots.txt
  • Storable but Non-Cacheable Content [10049] total: 6:
    • https://marllus.com
    • https://marllus.com/
    • https://marllus.com/busca
    • https://marllus.com/categories
    • https://marllus.com/contato
    • ..

View the following link to download the report. RunnerID:3664805794

[github-actions[bot]]

• Site: https://marllus.com New Alerts
  • Retrieved from Cache [10050] total: 12:
    • https://marllus.com/assets/css/main.css
    • https://marllus.com/assets/css/screen.css
    • https://marllus.com/assets/images/avatar.svg
    • https://marllus.com/assets/images/devops-watchtower.webp
    • https://marllus.com/assets/images/icon-contact.svg
    • ..

View the following link to download the report. RunnerID:3664815065

[github-actions[bot]]

• Site: https://marllus.com Resolved Alerts
  • Retrieved from Cache [10050] total: 12:

View the following link to download the report. RunnerID:3789068576

[github-actions[bot]]

• Site: https://marllus.com New Alerts
  • Retrieved from Cache [10050] total: 12:
    • https://marllus.com/assets/css/main.css
    • https://marllus.com/assets/images/antologiapoetica.jpg
    • https://marllus.com/assets/images/avatar.jpeg
    • https://marllus.com/assets/images/avatar.svg
    • https://marllus.com/assets/images/icon-contact.svg
    • ..

View the following link to download the report. RunnerID:3789076208

[github-actions[bot]]

• Site: https://marllus.com New Alerts
  • PII Disclosure [10062] total: 1:
    • https://marllus.com/arte/2020/05/15/so-me-resta-grito

View the following link to download the report. RunnerID:3789114838

[github-actions[bot]]

• Site: https://marllus.com Resolved Alerts
  • PII Disclosure [10062] total: 1:

View the following link to download the report. RunnerID:3789114258

[github-actions[bot]]

• Site: https://marllus.com New Alerts
  • PII Disclosure [10062] total: 1:
    • https://marllus.com/page29/

View the following link to download the report. RunnerID:3789391832

[github-actions[bot]]

• Site: https://marllus.com Resolved Alerts
  • PII Disclosure [10062] total: 1:

View the following link to download the report. RunnerID:3789417687