ZAP Scan Baseline Report - Githubissues

shraddha-jiem / simple-php-website

An introductory example of how to build a simple and minimal website built with PHP.

0 stars 0 forks source link

ZAP Scan Baseline Report #29

Open github-actions[bot] opened 7 months ago

github-actions[bot] commented 7 months ago

Site: https://dotnetthoughts.net.
Site: https://dotnetthoughts.net New Alerts
- Absence of Anti-CSRF Tokens [10202] total: 11:
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net/
  - https://dotnetthoughts.net/archives/%23%20November2023
  - https://dotnetthoughts.net/continuous-database-deployments-to-azure-sql-server-with-bitbucket/
  - https://dotnetthoughts.net/create-a-web-api-with-aspnet-core-and-mongodb/
  - ..
- Application Error Disclosure [90022] total: 1:
  - https://dotnetthoughts.net/how-to-create-socialmedia-posts-using-python/
- Content Security Policy (CSP) Header Not Set [10038] total: 11:
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net/
  - https://dotnetthoughts.net/archives/%23%20November2023
  - https://dotnetthoughts.net/continuous-database-deployments-to-azure-sql-server-with-bitbucket/
  - https://dotnetthoughts.net/create-a-web-api-with-aspnet-core-and-mongodb/
  - ..
- Cross-Domain Misconfiguration [10098] total: 10:
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net/
  - https://dotnetthoughts.net/about
  - https://dotnetthoughts.net/archives
  - https://dotnetthoughts.net/create-a-web-api-with-aspnet-core-and-mongodb/
  - ..
- Missing Anti-clickjacking Header [10020] total: 10:
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net/continuous-database-deployments-to-azure-sql-server-with-bitbucket/
  - https://dotnetthoughts.net/create-a-web-api-with-aspnet-core-and-mongodb/
  - https://dotnetthoughts.net/creating-microsoft-teams-apps-with-dotnet-and-vs/
  - https://dotnetthoughts.net/deploy-a-website-with-azure-virtual-machines-part4/
  - ..
- Source Code Disclosure - ASP.NET [10099] total: 1:
  - https://dotnetthoughts.net/how-to-integrate-jquery-ui-datepicker-in-mvc/
- Source Code Disclosure - SQL [10099] total: 11:
  - https://dotnetthoughts.net/archives/
  - https://dotnetthoughts.net/bundling-and-minification-in-aspnet-5-using-gulp-and-bower/
  - https://dotnetthoughts.net/continuous-deployment-github-with-azure-web-sites/
  - https://dotnetthoughts.net/create-database-permission-denied-in-database-master-sql-express/
  - https://dotnetthoughts.net/creating-microsoft-teams-apps-with-dotnet-and-vs/
  - ..
- Sub Resource Integrity Attribute Missing [90003] total: 8:
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net/
  - ..
- Cross-Domain JavaScript Source File Inclusion [10017] total: 9:
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net/
  - https://dotnetthoughts.net/
  - ..
- Dangerous JS Functions [10110] total: 1:
  - https://dotnetthoughts.net/csharp-interactive-with-visual-studio-2015/
- Information Disclosure - Debug Error Messages [10023] total: 4:
  - https://dotnetthoughts.net/adding-openapi-for-azure-function/
  - https://dotnetthoughts.net/creating-stored-procs-in-efcore-migrations/
  - https://dotnetthoughts.net/how-to-create-socialmedia-posts-using-python/
  - https://dotnetthoughts.net/preventing-cross-site-request-forgery-csrf-attacks-in-webapi/
- Permissions Policy Header Not Set [10063] total: 11:
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net/
  - https://dotnetthoughts.net/archives/%23%20November2023
  - https://dotnetthoughts.net/continuous-database-deployments-to-azure-sql-server-with-bitbucket/
  - https://dotnetthoughts.net/create-a-web-api-with-aspnet-core-and-mongodb/
  - ..
- Private IP Disclosure [2] total: 4:
  - https://dotnetthoughts.net/aspnet-core-with-nginx-as-reverse-proxy/
  - https://dotnetthoughts.net/monitor-azure-webjobs-status-with-application-insights/
  - https://dotnetthoughts.net/running-aspnet-core-in-docker/
  - https://dotnetthoughts.net/running-console-applications-in-containers/
- Strict-Transport-Security Header Not Set [10035] total: 11:
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net/
  - https://dotnetthoughts.net/continuous-database-deployments-to-azure-sql-server-with-bitbucket/
  - https://dotnetthoughts.net/create-a-web-api-with-aspnet-core-and-mongodb/
  - https://dotnetthoughts.net/creating-microsoft-teams-apps-with-dotnet-and-vs/
  - ..
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://dotnetthoughts.net/creating-an-offline-installer-for-visualstudio-2017/
- X-Content-Type-Options Header Missing [10021] total: 11:
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net/
  - https://dotnetthoughts.net/continuous-database-deployments-to-azure-sql-server-with-bitbucket/
  - https://dotnetthoughts.net/create-a-web-api-with-aspnet-core-and-mongodb/
  - https://dotnetthoughts.net/creating-microsoft-teams-apps-with-dotnet-and-vs/
  - ..
- Information Disclosure - Suspicious Comments [10027] total: 12:
  - https://dotnetthoughts.net/building-a-language-translation-bot-using-skype-and-c/
  - https://dotnetthoughts.net/create-a-web-api-with-aspnet-core-and-mongodb/
  - https://dotnetthoughts.net/deploy-a-website-with-azure-virtual-machines-part4/
  - https://dotnetthoughts.net/deploy-a-website-with-azure-virtual-machines-part5/
  - https://dotnetthoughts.net/deploy-a-website-with-azure-virtual-machines-part6/
  - ..
- Modern Web Application [10109] total: 12:
  - https://dotnetthoughts.net/continuous-database-deployments-to-azure-sql-server-with-bitbucket/
  - https://dotnetthoughts.net/create-a-web-api-with-aspnet-core-and-mongodb/
  - https://dotnetthoughts.net/creating-microsoft-teams-apps-with-dotnet-and-vs/
  - https://dotnetthoughts.net/deploy-a-website-with-azure-virtual-machines-part4/
  - https://dotnetthoughts.net/deploy-a-website-with-azure-virtual-machines-part5/
  - ..
- Re-examine Cache-control Directives [10015] total: 10:
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net/
  - https://dotnetthoughts.net/continuous-database-deployments-to-azure-sql-server-with-bitbucket/
  - https://dotnetthoughts.net/create-a-web-api-with-aspnet-core-and-mongodb/
  - https://dotnetthoughts.net/creating-microsoft-teams-apps-with-dotnet-and-vs/
  - ..
- Retrieved from Cache [10050] total: 12:
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net/
  - https://dotnetthoughts.net/about
  - https://dotnetthoughts.net/archives
  - ..
- Storable and Cacheable Content [10049] total: 11:
  - https://dotnetthoughts.net
  - https://dotnetthoughts.net/
  - https://dotnetthoughts.net/about
  - https://dotnetthoughts.net/archives
  - https://dotnetthoughts.net/create-a-web-api-with-aspnet-core-and-mongodb/
  - ..

View the following link to download the report. RunnerID:7045263008

github-actions[bot] commented 7 months ago

Site: https://ore-dev.jiem.in New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 11:
- Missing Anti-clickjacking Header [10020] total: 12:
- Sub Resource Integrity Attribute Missing [90003] total: 9:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 10:
- Dangerous JS Functions [10110] total: 1:
  - https://ore-dev.jiem.in/static/js/main.4c8e80f5.js
- Permissions Policy Header Not Set [10063] total: 11:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 11:
- Strict-Transport-Security Header Not Set [10035] total: 11:
- X-Content-Type-Options Header Missing [10021] total: 11:
- Information Disclosure - Suspicious Comments [10027] total: 1:
  - https://ore-dev.jiem.in/static/js/main.4c8e80f5.js
- Modern Web Application [10109] total: 11:
- Re-examine Cache-control Directives [10015] total: 4:
- Storable and Cacheable Content [10049] total: 12:

View the following link to download the report. RunnerID:7045500237

github-actions[bot] commented 7 months ago

Site: https://ore-dev.jiem.in Ignored Alerts
- Strict-Transport-Security Header Not Set [10035] total: 11:

View the following link to download the report. RunnerID:7046521120