ZAP Scan Baseline Report

github-actions[bot] commented 11 months ago

Site: https://zotregistry.io New Alerts
- Absence of Anti-CSRF Tokens [10202] total: 12:
- Content Security Policy (CSP) Header Not Set [10038] total: 11:
- Cross-Domain Misconfiguration [10098] total: 11:
- Missing Anti-clickjacking Header [10020] total: 11:
- Sub Resource Integrity Attribute Missing [90003] total: 12:
- Permissions Policy Header Not Set [10063] total: 11:
- X-Content-Type-Options Header Missing [10021] total: 11:
- Base64 Disclosure [10094] total: 12:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Modern Web Application [10109] total: 11:
- Re-examine Cache-control Directives [10015] total: 11:
- Retrieved from Cache [10050] total: 12:
- Sec-Fetch-Dest Header is Missing [90005] total: 2:
  - https://zotregistry.io
  - https://zotregistry.io/robots.txt
- Sec-Fetch-Mode Header is Missing [90005] total: 2:
  - https://zotregistry.io
  - https://zotregistry.io/robots.txt
- Sec-Fetch-Site Header is Missing [90005] total: 2:
  - https://zotregistry.io
  - https://zotregistry.io/robots.txt
- Sec-Fetch-User Header is Missing [90005] total: 2:
  - https://zotregistry.io
  - https://zotregistry.io/robots.txt
- Storable and Cacheable Content [10049] total: 11:

View the following link to download the report. RunnerID:6582361822

github-actions[bot] commented 9 months ago

Site: https://zotregistry.io New Alerts
- Application Error Disclosure [90022] total: 2:
  - https://zotregistry.io/v2.0.0/developer-guide/api-reference/
  - https://zotregistry.io/v2.0.0/developer-guide/api-reference/?query=ZAP
- Information Disclosure - Debug Error Messages [10023] total: 2:
  - https://zotregistry.io/v2.0.0/developer-guide/api-reference/
  - https://zotregistry.io/v2.0.0/developer-guide/api-reference/?query=ZAP

View the following link to download the report. RunnerID:7256266229

github-actions[bot] commented 8 months ago

Site: https://zotregistry.dev New Alerts
- Absence of Anti-CSRF Tokens [10202] total: 12:
  - https://zotregistry.dev/robots.txt
  - https://zotregistry.dev/v2.0.0/
  - https://zotregistry.dev/v2.0.0/general/architecture/
  - https://zotregistry.dev/v2.0.0/general/concepts/
  - https://zotregistry.dev/v2.0.0/general/extensions/
  - ..
- Application Error Disclosure [90022] total: 2:
  - https://zotregistry.dev/v2.0.0/developer-guide/api-reference/
  - https://zotregistry.dev/v2.0.0/developer-guide/api-reference/?query=ZAP
- Content Security Policy (CSP) Header Not Set [10038] total: 11:
  - https://zotregistry.dev
  - https://zotregistry.dev/
  - https://zotregistry.dev/latest/
  - https://zotregistry.dev/robots.txt
  - https://zotregistry.dev/v2.0.0/
  - ..
- Cross-Domain Misconfiguration [10098] total: 11:
  - https://zotregistry.dev
  - https://zotregistry.dev/
  - https://zotregistry.dev/latest/
  - https://zotregistry.dev/robots.txt
  - https://zotregistry.dev/sitemap.xml
  - ..
- Missing Anti-clickjacking Header [10020] total: 11:
  - https://zotregistry.dev
  - https://zotregistry.dev/
  - https://zotregistry.dev/latest/
  - https://zotregistry.dev/v2.0.0/
  - https://zotregistry.dev/v2.0.0/general/architecture/
  - ..
- Sub Resource Integrity Attribute Missing [90003] total: 12:
  - https://zotregistry.dev/robots.txt
  - https://zotregistry.dev/robots.txt
  - https://zotregistry.dev/v2.0.0/
  - https://zotregistry.dev/v2.0.0/
  - https://zotregistry.dev/v2.0.0/general/concepts/
  - ..
- Information Disclosure - Debug Error Messages [10023] total: 2:
  - https://zotregistry.dev/v2.0.0/developer-guide/api-reference/
  - https://zotregistry.dev/v2.0.0/developer-guide/api-reference/?query=ZAP
- Permissions Policy Header Not Set [10063] total: 11:
  - https://zotregistry.dev
  - https://zotregistry.dev/
  - https://zotregistry.dev/latest/
  - https://zotregistry.dev/robots.txt
  - https://zotregistry.dev/v2.0.0/
  - ..
- Strict-Transport-Security Header Not Set [10035] total: 11:
  - https://zotregistry.dev
  - https://zotregistry.dev/
  - https://zotregistry.dev/latest/
  - https://zotregistry.dev/robots.txt
  - https://zotregistry.dev/sitemap.xml
  - ..
- X-Content-Type-Options Header Missing [10021] total: 11:
  - https://zotregistry.dev
  - https://zotregistry.dev/
  - https://zotregistry.dev/latest/
  - https://zotregistry.dev/sitemap.xml
  - https://zotregistry.dev/v2.0.0/
  - ..
- Base64 Disclosure [10094] total: 12:
  - https://zotregistry.dev/articles/clustering/
  - https://zotregistry.dev/assets/stylesheets/main.20d9efc8.min.css
  - https://zotregistry.dev/v2.0.0/
  - https://zotregistry.dev/v2.0.0/?query=ZAP
  - https://zotregistry.dev/v2.0.0/articles/clustering/
  - ..
- Information Disclosure - Suspicious Comments [10027] total: 12:
  - https://zotregistry.dev/robots.txt
  - https://zotregistry.dev/v2.0.0/
  - https://zotregistry.dev/v2.0.0/general/architecture/
  - https://zotregistry.dev/v2.0.0/general/concepts/
  - https://zotregistry.dev/v2.0.0/general/extensions/
  - ..
- Modern Web Application [10109] total: 11:
  - https://zotregistry.dev
  - https://zotregistry.dev/
  - https://zotregistry.dev/latest/
  - https://zotregistry.dev/robots.txt
  - https://zotregistry.dev/v2.0.0/
  - ..
- Re-examine Cache-control Directives [10015] total: 11:
  - https://zotregistry.dev
  - https://zotregistry.dev/
  - https://zotregistry.dev/latest/
  - https://zotregistry.dev/sitemap.xml
  - https://zotregistry.dev/v2.0.0/
  - ..
- Retrieved from Cache [10050] total: 12:
  - https://zotregistry.dev
  - https://zotregistry.dev
  - https://zotregistry.dev/
  - https://zotregistry.dev/latest/
  - https://zotregistry.dev/robots.txt
  - ..
- Sec-Fetch-Dest Header is Missing [90005] total: 3:
  - https://zotregistry.dev
  - https://zotregistry.dev/latest/
  - https://zotregistry.dev/robots.txt
- Sec-Fetch-Mode Header is Missing [90005] total: 3:
  - https://zotregistry.dev
  - https://zotregistry.dev/latest/
  - https://zotregistry.dev/robots.txt
- Sec-Fetch-Site Header is Missing [90005] total: 3:
  - https://zotregistry.dev
  - https://zotregistry.dev/latest/
  - https://zotregistry.dev/robots.txt
- Sec-Fetch-User Header is Missing [90005] total: 3:
  - https://zotregistry.dev
  - https://zotregistry.dev/latest/
  - https://zotregistry.dev/robots.txt
- Storable and Cacheable Content [10049] total: 11:
  - https://zotregistry.dev
  - https://zotregistry.dev/
  - https://zotregistry.dev/latest/
  - https://zotregistry.dev/robots.txt
  - https://zotregistry.dev/sitemap.xml
  - ..

View the following link to download the report. RunnerID:7548113831

project-zot / project-zot.github.io

ZAP Scan Baseline Report #131