New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

OWASP Baseline #1885

Open

github-actions bot opened this issue Dec 10, 2023 · 1 comment

github-actions bot commented Dec 10, 2023

Site: http://localhost:3004
New Alerts
- Absence of Anti-CSRF Tokens [10202] total: 2:
  - http://localhost:3004/
  - http://localhost:3004/
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
  - http://localhost:3004/
  - http://localhost:3004/robots.txt
  - http://localhost:3004/sitemap.xml
- Cookie No HttpOnly Flag [10010] total: 11:
  - http://localhost:3004/
  - http://localhost:3004/_next/static/chunks/framework-d583295f3144c491.js
  - http://localhost:3004/_next/static/chunks/main-a3de02a07ab781e7.js
  - http://localhost:3004/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  - http://localhost:3004/_next/static/css/e90bd523cb72f146.css
  - ..
- Cookie without SameSite Attribute [10054] total: 10:
  - http://localhost:3004/
  - http://localhost:3004/
  - http://localhost:3004/icons/bcid-apple-icon.svg
  - http://localhost:3004/icons/bcid-apple-touch-icon.png
  - http://localhost:3004/icons/bcid-favicon-16x16.png
  - ..
- Dangerous JS Functions [10110] total: 1:
  - http://localhost:3004/_next/static/chunks/pages/_app-52dc5d07a203436a.js
- Permissions Policy Header Not Set [10063] total: 11:
  - http://localhost:3004/
  - http://localhost:3004/_next/static/CGeZCDPuzs6CJMKqYF_l-/_buildManifest.js
  - http://localhost:3004/_next/static/CGeZCDPuzs6CJMKqYF_l-/_ssgManifest.js
  - http://localhost:3004/_next/static/chunks/framework-d583295f3144c491.js
  - http://localhost:3004/_next/static/chunks/main-a3de02a07ab781e7.js
  - ..
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 3:
  - http://localhost:3004/
  - http://localhost:3004/robots.txt
  - http://localhost:3004/sitemap.xml
- Timestamp Disclosure - Unix [10096] total: 3:
  - http://localhost:3004/_next/static/chunks/8360-2891d9bad8e6c5dd.js
  - http://localhost:3004/_next/static/chunks/pages/_app-52dc5d07a203436a.js
  - http://localhost:3004/_next/static/chunks/pages/index-d6b807e46a8235e4.js
- Base64 Disclosure [10094] total: 9:
  - http://localhost:3004/
  - http://localhost:3004/
  - http://localhost:3004/_next/static/CGeZCDPuzs6CJMKqYF_l-/_ssgManifest.js
  - http://localhost:3004/_next/static/chunks/pages/_app-52dc5d07a203436a.js
  - http://localhost:3004/img/BCID_CleanBC_rev_tagline_colour.svg
  - ..
- Information Disclosure - Suspicious Comments [10027] total: 11:
  - http://localhost:3004/
  - http://localhost:3004/_next/static/chunks/framework-d583295f3144c491.js
  - http://localhost:3004/_next/static/chunks/main-a3de02a07ab781e7.js
  - http://localhost:3004/_next/static/chunks/pages/_app-52dc5d07a203436a.js
  - http://localhost:3004/_next/static/chunks/pages/_app-52dc5d07a203436a.js
  - ..
- Loosely Scoped Cookie [90033] total: 12:
  - http://localhost:3004/
  - http://localhost:3004/
  - http://localhost:3004/_next/static/chunks/framework-d583295f3144c491.js
  - http://localhost:3004/_next/static/chunks/main-a3de02a07ab781e7.js
  - http://localhost:3004/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  - ..
- Modern Web Application [10109] total: 3:
  - http://localhost:3004/
  - http://localhost:3004/robots.txt
  - http://localhost:3004/sitemap.xml
- Non-Storable Content [10049] total: 1:
  - http://localhost:3004/
- Sec-Fetch-Dest Header is Missing [90005] total: 3:
  - http://localhost:3004/
  - http://localhost:3004/icons/bcid-apple-touch-icon.png
  - http://localhost:3004/robots.txt
- Sec-Fetch-Mode Header is Missing [90005] total: 3:
  - http://localhost:3004/
  - http://localhost:3004/icons/bcid-apple-touch-icon.png
  - http://localhost:3004/robots.txt
- Sec-Fetch-Site Header is Missing [90005] total: 3:
  - http://localhost:3004/
  - http://localhost:3004/icons/bcid-apple-touch-icon.png
  - http://localhost:3004/robots.txt
- Sec-Fetch-User Header is Missing [90005] total: 3:
  - http://localhost:3004/
  - http://localhost:3004/icons/bcid-apple-touch-icon.png
  - http://localhost:3004/robots.txt
- Session Management Response Identified [10112] total: 14:
  - http://localhost:3004/
  - http://localhost:3004/_next/static/css/e90bd523cb72f146.css
  - http://localhost:3004/icons/bcid-apple-icon.svg
  - http://localhost:3004/icons/bcid-apple-touch-icon.png
  - http://localhost:3004/icons/bcid-favicon-16x16.png
  - ..
- Storable and Cacheable Content [10049] total: 6:
  - http://localhost:3004/_next/static/chunks/main-a3de02a07ab781e7.js
  - http://localhost:3004/_next/static/chunks/pages/404-6afac836af067973.js
  - http://localhost:3004/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
  - http://localhost:3004/_next/static/css/e90bd523cb72f146.css
  - http://localhost:3004/robots.txt
  - ..
- Storable but Non-Cacheable Content [10049] total: 4:
  - http://localhost:3004/icons/bcid-apple-icon.svg
  - http://localhost:3004/icons/bcid-apple-touch-icon.png
  - http://localhost:3004/icons/bcid-favicon-16x16.png
  - http://localhost:3004/icons/bcid-favicon-32x32.png

View the following link to download the report.
RunnerID:7159235704

Author

github-actions bot commented Jan 26, 2024

Site: http://localhost:3004
New Alerts
- Full Path Disclosure [110009] total: 2:
  - http://localhost:3004/robots.txt
  - http://localhost:3004/sitemap.xml

View the following link to download the report.
RunnerID:7672882540

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment