ZAP Full Scan Report

[github-actions[bot]]

• Site: https://127.0.0.1

• Site: http://127.0.0.1:8000 New Alerts

  • .htaccess Information Leak [40032] total: 1:
    • http://127.0.0.1:8000/.htaccess
  • Content Security Policy (CSP) Header Not Set [10038] total: 6:
    • http://127.0.0.1:8000
    • http://127.0.0.1:8000/
    • http://127.0.0.1:8000/forgot-password
    • http://127.0.0.1:8000/login
    • http://127.0.0.1:8000/register
    • ..
  • HTTP Only Site [10106] total: 1:
    • http://127.0.0.1:8000/forgot-password
  • Missing Anti-clickjacking Header [10020] total: 4:
    • http://127.0.0.1:8000/
    • http://127.0.0.1:8000/forgot-password
    • http://127.0.0.1:8000/login
    • http://127.0.0.1:8000/register
  • Sub Resource Integrity Attribute Missing [90003] total: 8:
    • http://127.0.0.1:8000
    • http://127.0.0.1:8000/
    • http://127.0.0.1:8000/forgot-password
    • http://127.0.0.1:8000/forgot-password
    • http://127.0.0.1:8000/login
    • ..
  • Big Redirect Detected (Potential Sensitive Information Leak) [10044] total: 3:
    • http://127.0.0.1:8000/forgot-password
    • http://127.0.0.1:8000/login
    • http://127.0.0.1:8000/register
  • Cookie No HttpOnly Flag [10010] total: 8:
    • http://127.0.0.1:8000
    • http://127.0.0.1:8000/
    • http://127.0.0.1:8000/forgot-password
    • http://127.0.0.1:8000/login
    • http://127.0.0.1:8000/register
    • ..
  • Cookie Slack Detector [90027] total: 13:
    • http://127.0.0.1:8000
    • http://127.0.0.1:8000/
    • http://127.0.0.1:8000/build
    • http://127.0.0.1:8000/build/assets
    • http://127.0.0.1:8000/build/assets/app-8aacb4a7.js
    • ..
  • Permissions Policy Header Not Set [10063] total: 7:
    • http://127.0.0.1:8000
    • http://127.0.0.1:8000/
    • http://127.0.0.1:8000/build/assets/app-8aacb4a7.js
    • http://127.0.0.1:8000/forgot-password
    • http://127.0.0.1:8000/login
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 9:
    • http://127.0.0.1:8000
    • http://127.0.0.1:8000/
    • http://127.0.0.1:8000/forgot-password
    • http://127.0.0.1:8000/login
    • http://127.0.0.1:8000/register
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://127.0.0.1:8000
    • http://127.0.0.1:8000/
    • http://127.0.0.1:8000/build/assets/app-8aacb4a7.js
    • http://127.0.0.1:8000/build/assets/app-e61f1d21.css
    • http://127.0.0.1:8000/forgot-password
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 2:
    • http://127.0.0.1:8000/build/assets/app-8aacb4a7.js
    • http://127.0.0.1:8000/build/assets/app-8aacb4a7.js
  • Non-Storable Content [10049] total: 9:
    • http://127.0.0.1:8000
    • http://127.0.0.1:8000/
    • http://127.0.0.1:8000/forgot-password
    • http://127.0.0.1:8000/login
    • http://127.0.0.1:8000/register
    • ..
  • Storable and Cacheable Content [10049] total: 2:
    • http://127.0.0.1:8000/build/assets/app-e61f1d21.css
    • http://127.0.0.1:8000/robots.txt
  • User Agent Fuzzer [10104] total: 36:
    • http://127.0.0.1:8000/forgot-password
    • http://127.0.0.1:8000/forgot-password
    • http://127.0.0.1:8000/forgot-password
    • http://127.0.0.1:8000/forgot-password
    • http://127.0.0.1:8000/forgot-password
    • ..

View the following link to download the report. RunnerID:4186029500