ZAP Scan Baseline Report #1
Description
- Site: https://dev-ride.apps.gold.devops.gov.bc.ca
New Alerts- Content Security Policy (CSP) Header Not Set [10038] total: 11:
- Cookie No HttpOnly Flag [10010] total: 2:
- Cookie with SameSite Attribute None [10054] total: 2:
- Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 10:
- https://dev-ride.apps.gold.devops.gov.bc.ca/
- https://dev-ride.apps.gold.devops.gov.bc.ca/events/
- https://dev-ride.apps.gold.devops.gov.bc.ca/static/debug_toolbar/css/print.css
- https://dev-ride.apps.gold.devops.gov.bc.ca/static/debug_toolbar/js/toolbar.js
- https://dev-ride.apps.gold.devops.gov.bc.ca/static/events/events.css
- ..
- Permissions Policy Header Not Set [10063] total: 11:
- Strict-Transport-Security Header Not Set [10035] total: 11:
- Timestamp Disclosure - Unix [10096] total: 1:
- X-Content-Type-Options Header Missing [10021] total: 10:
- https://dev-ride.apps.gold.devops.gov.bc.ca/static/debug_toolbar/css/print.css
- https://dev-ride.apps.gold.devops.gov.bc.ca/static/debug_toolbar/css/toolbar.css
- https://dev-ride.apps.gold.devops.gov.bc.ca/static/debug_toolbar/js/toolbar.js
- https://dev-ride.apps.gold.devops.gov.bc.ca/static/events/events.css
- https://dev-ride.apps.gold.devops.gov.bc.ca/static/events/ol-10.4.0.css
- ..
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 11:
- Re-examine Cache-control Directives [10015] total: 11:
- Session Management Response Identified [10112] total: 4:
- Storable and Cacheable Content [10049] total: 11:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 6:
View the following link to download the report.
RunnerID:13687960151