ZAP Scan Baseline Report - Githubissues

marlluslustosa / myblog

my blog

https://marllus.com

MIT License

1 stars 1 forks source link

ZAP Scan Baseline Report #46

Open github-actions[bot] opened 9 months ago

github-actions[bot] commented 9 months ago

Site: https://marllus.com New Alerts
- Absence of Anti-CSRF Tokens [10202] total: 2:
  - https://marllus.com/en/about
  - https://marllus.com/sobre
- CSP: Wildcard Directive [10055] total: 3:
  - https://marllus.com
  - https://marllus.com/
  - https://marllus.com/poesia/2015/12/18/quando-whatsapp-acabou
- CSP: script-src unsafe-inline [10055] total: 3:
  - https://marllus.com
  - https://marllus.com/
  - https://marllus.com/poesia/2015/12/18/quando-whatsapp-acabou
- CSP: style-src unsafe-inline [10055] total: 3:
  - https://marllus.com
  - https://marllus.com/
  - https://marllus.com/poesia/2015/12/18/quando-whatsapp-acabou
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
  - https://marllus.com/cdn-cgi/l/email-protection
- Cross-Domain Misconfiguration [10098] total: 11:
  - https://marllus.com
  - https://marllus.com/en/poetry/2015/12/18/whats-over.html
  - https://marllus.com/poesia/2015/02/23/primo.html
  - https://marllus.com/poesia/2015/12/18/quando-whatsapp-acabou.html
  - https://marllus.com/robots.txt
  - ..
- Sub Resource Integrity Attribute Missing [90003] total: 11:
  - https://marllus.com
  - https://marllus.com
  - https://marllus.com
  - https://marllus.com
  - https://marllus.com
  - ..
- Vulnerable JS Library [10003] total: 1:
  - https://marllus.com/assets/js/jquery.min.js
- Cross-Domain JavaScript Source File Inclusion [10017] total: 13:
  - https://marllus.com
  - https://marllus.com
  - https://marllus.com
  - https://marllus.com
  - https://marllus.com
  - ..
- Dangerous JS Functions [10110] total: 1:
  - https://marllus.com/assets/js/jquery.min.js
- Permissions Policy Header Not Set [10063] total: 9:
  - https://marllus.com/admin/preview-templates/index.js
  - https://marllus.com/assets/js/crypto.min.js
  - https://marllus.com/assets/js/ie10-viewport-bug-workaround.js
  - https://marllus.com/assets/js/jquery.min.js
  - https://marllus.com/assets/js/mediumish.js
  - ..
- Secure Pages Include Mixed Content [10040] total: 11:
  - https://marllus.com/tecnologia/2016/02/07/hcl-xenserver
  - https://marllus.com/tecnologia/2016/02/17/alta-disponibilidade-ha-high-availability-no-xenserver-6-5
  - https://marllus.com/tecnologia/2016/02/17/entendendo-templates-xenserver-6-5
  - https://marllus.com/tecnologia/2016/02/17/fast-clone-e-full-copy-de-vms-no-xenserver-6-5
  - https://marllus.com/tecnologia/2016/02/17/instalacao-xenserver
  - ..
- Strict-Transport-Security Header Not Set [10035] total: 3:
  - https://marllus.com/cdn-cgi/l/email-protection
  - https://marllus.com/cdn-cgi/styles/cf.errors.css
  - https://marllus.com/cdn-cgi/styles/cf.errors.ie.css
- Timestamp Disclosure - Unix [10096] total: 724:
  - https://marllus.com/assets/js/openpgp.min.js
  - https://marllus.com/assets/js/openpgp.min.js
  - https://marllus.com/assets/js/openpgp.min.js
  - https://marllus.com/assets/js/openpgp.min.js
  - https://marllus.com/assets/js/openpgp.min.js
  - ..
- Information Disclosure - Suspicious Comments [10027] total: 12:
  - https://marllus.com
  - https://marllus.com
  - https://marllus.com/
  - https://marllus.com/busca
  - https://marllus.com/contato
  - ..
- Modern Web Application [10109] total: 11:
  - https://marllus.com
  - https://marllus.com/
  - https://marllus.com/busca
  - https://marllus.com/contato
  - https://marllus.com/page2/
  - ..
- Non-Storable Content [10049] total: 8:
  - https://marllus.com/en/poetry/2015/12/18/whats-over.html
  - https://marllus.com/poesia/2015/02/23/primo.html
  - https://marllus.com/poesia/2015/12/18/quando-whatsapp-acabou.html
  - https://marllus.com/tecnologia/2016/02/07/hcl-xenserver.html
  - https://marllus.com/tecnologia/2016/02/16/monitoramento-xenserver-6-5.html
  - ..
- Re-examine Cache-control Directives [10015] total: 11:
  - https://marllus.com
  - https://marllus.com/
  - https://marllus.com/busca
  - https://marllus.com/categories
  - https://marllus.com/contato
  - ..
- Retrieved from Cache [10050] total: 3:
  - https://marllus.com/assets/css/main.css
  - https://marllus.com/assets/images/cela-picasso.jpeg
  - https://marllus.com/assets/images/galo-monet.jpeg
- Storable and Cacheable Content [10049] total: 1:
  - https://marllus.com/robots.txt
- Storable but Non-Cacheable Content [10049] total: 2:
  - https://marllus.com
  - https://marllus.com/sitemap.xml

View the following link to download the report. RunnerID:6449101225