gdsd_portal_api_zap_scan

[github-actions]

• Site: https://spd-train.justice.gov.bc.ca
  New Alerts
  • Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 5:
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/accredited-dog-schools
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/configuration
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/metadata/address/id
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/metadata/address?search=ZAP&country=country&lastId=lastId
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/swagger/v1/swagger.json
  • Unexpected Content-Type was returned [100001] total: 78:
    • https://spd-train.justice.gov.bc.ca
    • https://spd-train.justice.gov.bc.ca/
    • https://spd-train.justice.gov.bc.ca/7278328236111868659
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 5:
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/accredited-dog-schools
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/configuration
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/metadata/address/id
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/metadata/address?search=ZAP&country=country&lastId=lastId
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/swagger/v1/swagger.json
  • Non-Storable Content [10049] total: 12:
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/accredited-dog-schools
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/applicant
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/applicant/id
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/applicant/search
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/applicants-anonymous/dog-certification-applications
    • ..
  • Re-examine Cache-control Directives [10015] total: 4:
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/accredited-dog-schools
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/configuration
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/metadata/address?search=ZAP&country=country&lastId=lastId
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/swagger/v1/swagger.json

View the following link to download the report.
RunnerID:15449158343

---

ZAP by Checkmarx

[github-actions]

• Site: https://spd-train.justice.gov.bc.ca
  New Alerts

  • Content Security Policy (CSP) Header Not Set [10038] total: 1:
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/swagger/v1/swagger.json
  • Permissions Policy Header Not Set [10063] total: 1:
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/swagger/v1/swagger.json
  • Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 1:
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/swagger/v1/swagger.json
  • Strict-Transport-Security Header Not Set [10035] total: 1:
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/swagger/v1/swagger.json

  Resolved Alerts

  • Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 5:
  • X-Content-Type-Options Header Missing [10021] total: 5:
  • Re-examine Cache-control Directives [10015] total: 4:

View the following link to download the report.
RunnerID:15812563086

[github-actions]

• Site: https://spd-train.justice.gov.bc.ca
  New Alerts

  • Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 5:
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/accredited-dog-schools
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/configuration
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/metadata/address/id
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/metadata/address?search=ZAP&country=country&lastId=lastId
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/swagger/v1/swagger.json
  • X-Content-Type-Options Header Missing [10021] total: 5:
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/accredited-dog-schools
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/configuration
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/metadata/address/id
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/metadata/address?search=ZAP&country=country&lastId=lastId
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/swagger/v1/swagger.json
  • Re-examine Cache-control Directives [10015] total: 5:
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/accredited-dog-schools
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/configuration
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/metadata/address/id
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/api/metadata/address?search=ZAP&country=country&lastId=lastId
    • https://spd-train.justice.gov.bc.ca/guide-dog-service-dog/swagger/v1/swagger.json

  Resolved Alerts

  • Content Security Policy (CSP) Header Not Set [10038] total: 1:
  • Permissions Policy Header Not Set [10063] total: 1:
  • Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 1:
  • Strict-Transport-Security Header Not Set [10035] total: 1:

View the following link to download the report.
RunnerID:15961175077