ZAP Scan Baseline Report

github-actions[bot] commented 1 year ago

Site: https://marllus.com New Alerts
- PII Disclosure [10062] total: 1:
  - https://marllus.com/poesia/2016/07/03/vespera
- Absence of Anti-CSRF Tokens [10202] total: 2:
  - https://marllus.com/en/about
  - https://marllus.com/sobre
- CSP: Wildcard Directive [10055] total: 3:
  - https://marllus.com
  - https://marllus.com/
  - https://marllus.com/contato
- CSP: script-src unsafe-inline [10055] total: 3:
  - https://marllus.com
  - https://marllus.com/
  - https://marllus.com/contato
- CSP: style-src unsafe-inline [10055] total: 3:
  - https://marllus.com
  - https://marllus.com/
  - https://marllus.com/contato
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
  - https://marllus.com/cdn-cgi/l/email-protection
- Cross-Domain Misconfiguration [10098] total: 11:
  - https://marllus.com
  - https://marllus.com/
  - https://marllus.com/arte/2021/05/16/livro-antologia-poetica.html
  - https://marllus.com/busca
  - https://marllus.com/contato
  - ..
- Sub Resource Integrity Attribute Missing [90003] total: 10:
  - https://marllus.com
  - https://marllus.com
  - https://marllus.com
  - https://marllus.com
  - https://marllus.com
  - ..
- Vulnerable JS Library [10003] total: 1:
  - https://marllus.com/assets/js/jquery.min.js
- Cross-Domain JavaScript Source File Inclusion [10017] total: 12:
  - https://marllus.com
  - https://marllus.com
  - https://marllus.com
  - https://marllus.com
  - https://marllus.com
  - ..
- Dangerous JS Functions [10110] total: 1:
  - https://marllus.com/assets/js/jquery.min.js
- Permissions Policy Header Not Set [10063] total: 9:
  - https://marllus.com/admin/preview-templates/index.js
  - https://marllus.com/assets/js/crypto.min.js
  - https://marllus.com/assets/js/ie10-viewport-bug-workaround.js
  - https://marllus.com/assets/js/jquery.min.js
  - https://marllus.com/assets/js/mediumish.js
  - ..
- Secure Pages Include Mixed Content [10040] total: 11:
  - https://marllus.com/tecnologia/2016/02/07/hcl-xenserver
  - https://marllus.com/tecnologia/2016/02/17/alta-disponibilidade-ha-high-availability-no-xenserver-6-5
  - https://marllus.com/tecnologia/2016/02/17/entendendo-templates-xenserver-6-5
  - https://marllus.com/tecnologia/2016/02/17/fast-clone-e-full-copy-de-vms-no-xenserver-6-5
  - https://marllus.com/tecnologia/2016/02/17/instalacao-xenserver
  - ..
- Strict-Transport-Security Header Not Set [10035] total: 3:
  - https://marllus.com/cdn-cgi/l/email-protection
  - https://marllus.com/cdn-cgi/styles/cf.errors.css
  - https://marllus.com/cdn-cgi/styles/cf.errors.ie.css
- Timestamp Disclosure - Unix [10096] total: 717:
  - https://marllus.com/assets/js/openpgp.min.js
  - https://marllus.com/assets/js/openpgp.min.js
  - https://marllus.com/assets/js/openpgp.min.js
  - https://marllus.com/assets/js/openpgp.min.js
  - https://marllus.com/assets/js/openpgp.min.js
  - ..
- Information Disclosure - Suspicious Comments [10027] total: 12:
  - https://marllus.com
  - https://marllus.com
  - https://marllus.com/
  - https://marllus.com/busca
  - https://marllus.com/contato
  - ..
- Modern Web Application [10109] total: 11:
  - https://marllus.com
  - https://marllus.com/
  - https://marllus.com/busca
  - https://marllus.com/contato
  - https://marllus.com/page2/
  - ..
- Non-Storable Content [10049] total: 5:
  - https://marllus.com/arte/2021/05/16/livro-antologia-poetica.html
  - https://marllus.com/en
  - https://marllus.com/tecnologia/2016/02/17/importacaoexportacao-de-vms-no-xenserver-6-5.html
  - https://marllus.com/tecnologia/2016/02/17/resizing-vdisks-vdis-xenserver-6-5.html
  - https://marllus.com/tecnologia/2020/06/07/pgp-form.html
- Re-examine Cache-control Directives [10015] total: 11:
  - https://marllus.com
  - https://marllus.com/
  - https://marllus.com/busca
  - https://marllus.com/categories
  - https://marllus.com/contato
  - ..
- Retrieved from Cache [10050] total: 2:
  - https://marllus.com/assets/images/icon-contact.svg
  - https://marllus.com/assets/images/icon-search.svg
- Storable and Cacheable Content [10049] total: 1:
  - https://marllus.com/robots.txt
- Storable but Non-Cacheable Content [10049] total: 6:
  - https://marllus.com
  - https://marllus.com/
  - https://marllus.com/busca
  - https://marllus.com/contato
  - https://marllus.com/sitemap.xml
  - ..

View the following link to download the report. RunnerID:4853606749

github-actions[bot] commented 1 year ago

Site: https://marllus.com Resolved Alerts
- PII Disclosure [10062] total: 1:

View the following link to download the report. RunnerID:4853619640

github-actions[bot] commented 1 year ago

Site: https://marllus.com New Alerts
- PII Disclosure [10062] total: 1:
  - https://marllus.com/tecnologia/2016/02/17/upgradeupdate-no-xenserver-6-5
  Resolved Alerts
- Retrieved from Cache [10050] total: 6:

View the following link to download the report. RunnerID:4853740349

github-actions[bot] commented 1 year ago

Site: https://marllus.com New Alerts
- Retrieved from Cache [10050] total: 12:
  Resolved Alerts
- PII Disclosure [10062] total: 1:

View the following link to download the report. RunnerID:4853841497

marlluslustosa / myblog

ZAP Scan Baseline Report #45