ZAP Scan Baseline Report - Githubissues

yurake / k8s-3tier-webapp

Sample web application based on k8s

MIT License

15 stars 25 forks source link

ZAP Scan Baseline Report #895

Closed github-actions[bot] closed 4 years ago

github-actions[bot] commented 4 years ago

Site: http://k8s.3tier.webapp New Alerts
- CSP Scanner: script-src unsafe-inline [10055] total: 2:
  - http://k8s.3tier.webapp/
  - http://k8s.3tier.webapp
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 11:
- Reverse Tabnabbing [10108] total: 2:
  - http://k8s.3tier.webapp
  - http://k8s.3tier.webapp/
- CSP Scanner: style-src unsafe-inline [10055] total: 2:
  - http://k8s.3tier.webapp/
  - http://k8s.3tier.webapp
- Content Security Policy (CSP) Header Not Set [10038] total: 5:
- Information Disclosure - Suspicious Comments [10027] total: 1:
  - http://k8s.3tier.webapp/js/jaxrs.js
- CSP Scanner: Notices [10055] total: 2:
  - http://k8s.3tier.webapp/
  - http://k8s.3tier.webapp
- CSP Scanner: Wildcard Directive [10055] total: 2:
  - http://k8s.3tier.webapp/
  - http://k8s.3tier.webapp
- Cross-Domain JavaScript Source File Inclusion [10017] total: 2:
  - http://k8s.3tier.webapp
  - http://k8s.3tier.webapp/

View the following link to download the report. RunnerID:313619606

issue-label-bot[bot] commented 4 years ago

Issue-Label Bot is automatically applying the label bug to this issue, with a confidence of 0.65. Please mark this comment with :thumbsup: or :thumbsdown: to give our bot feedback!

Links: app homepage, dashboard and code for this bot.