licensing_portal_api_zap_scan

[github-actions]

• Site: https://spd-train.justice.gov.bc.ca
  New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 1:
    • https://spd-train.justice.gov.bc.ca/licensing/swagger/v1/swagger.json
  • Application Error Disclosure [90022] total: 1:
    • https://spd-train.justice.gov.bc.ca/licensing/swagger/v1/swagger.json
  • Permissions Policy Header Not Set [10063] total: 1:
    • https://spd-train.justice.gov.bc.ca/licensing/swagger/v1/swagger.json
  • Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 1:
    • https://spd-train.justice.gov.bc.ca/licensing/swagger/v1/swagger.json
  • Unexpected Content-Type was returned [100001] total: 19:
    • https://spd-train.justice.gov.bc.ca
    • https://spd-train.justice.gov.bc.ca/
    • https://spd-train.justice.gov.bc.ca/5154883830111187619
    • https://spd-train.justice.gov.bc.ca/actuator/health
    • https://spd-train.justice.gov.bc.ca/computeMetadata/v1/
    • ..
  • Non-Storable Content [10049] total: 1:
    • https://spd-train.justice.gov.bc.ca/licensing/swagger/v1/swagger.json

View the following link to download the report.
RunnerID:17364505438

---

ZAP by Checkmarx