Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ZAP Scan warnings #189

Open
mishraomp opened this issue Oct 7, 2024 · 0 comments
Open

ZAP Scan warnings #189

mishraomp opened this issue Oct 7, 2024 · 0 comments
Assignees

Comments

@mishraomp
Copy link
Collaborator

WARN-NEW: Vulnerable JS Library [10003] x 1
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/static/js/bootstrap.min.js (200 OK)
WARN-NEW: Cookie No HttpOnly Flag [10010] x 2
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/rctool/import/0/ (200 OK)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/rctool/import/1/ (200 OK)
WARN-NEW: Cookie Without Secure Flag [10011] x 2
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/rctool/import/0/ (200 OK)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/rctool/import/1/ (200 OK)
WARN-NEW: X-Content-Type-Options Header Missing [10021] x 12
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/static/css/main.css (200 OK)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/static/css/rctool_intro.css (200 OK)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/static/css/bootstrap-tour-standalone.min.css (200 OK)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/static/css/rctool_tour.css (200 OK)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/static/css/header.css (200 OK)
WARN-NEW: Strict-Transport-Security Header Not Set [10035] x 11
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/ (200 OK)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt (404 Not Found)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml (404 Not Found)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/static/css/main.css (200 OK)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/static/css/rctool_intro.css (200 OK)
WARN-NEW: Server Leaks Version Information via "Server" HTTP Response Header Field [10036] x 10
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/ (302 Found)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/ (200 OK)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt (404 Not Found)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml (404 Not Found)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/ (302 Found)
WARN-NEW: Content Security Policy (CSP) Header Not Set [10038] x 7
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/ (200 OK)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt (404 Not Found)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml (404 Not Found)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/rctool/import/0/ (200 OK)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/rctool/tour/1/ (200 OK)
WARN-NEW: Cookie with SameSite Attribute None [10054] x 2
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/ (302 Found)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/ (302 Found)
WARN-NEW: Permissions Policy Header Not Set [10063] x 10
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/ (200 OK)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt (404 Not Found)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml (404 Not Found)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/rctool/import/0/ (200 OK)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/rctool/tour/1/ (200 OK)
WARN-NEW: Proxy Disclosure [40025] x 43
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/ (302 Found)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/ (200 OK)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/ (302 Found)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/rctool (404 Not Found)
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool (301 Moved Permanently)
WARN-NEW: Bypassing 403 [40038] x 1
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/rctool/develop/initialize (200 OK)
WARN-NEW: Application Error Disclosure [90022] x 1
https://nr-hydrometric-rating-curve-test-frontend.apps.silver.devops.gov.bc.ca/rctool/rctool/develop/initialize (500 Internal Server Error)
FAIL-NEW: 0 FAIL-INPROG: 0 WARN-NEW: 12 WARN-INPROG: 0 INFO: 0 IGNORE: 0 PASS: 132

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants