ZAP Full Scan Report #20

github-actions · 2023-10-17T04:57:19Z

Site: https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 4:
- CSP: style-src unsafe-inline [10055] total: 4:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- Proxy Disclosure [40025] total: 14:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 6:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca/assets/index-c1b65b33.css
- Cookie Slack Detector [90027] total: 14:
- Information Disclosure - Suspicious Comments [10027] total: 5:
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 10:
- Session Management Response Identified [10112] total: 7:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6542688078

github-actions · 2023-10-17T16:35:47Z

Site: https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6550165944

github-actions · 2023-10-17T16:57:38Z

Site: https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6550387922

github-actions · 2023-10-19T05:35:48Z

Site: https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6570326310

github-actions · 2023-10-19T05:36:33Z

Site: https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6570324534

github-actions · 2023-10-23T16:10:20Z

Site: https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6615940825

github-actions · 2023-10-23T16:11:42Z

Site: https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6615939984

github-actions · 2023-10-25T19:28:40Z

Site: https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6645199662

github-actions · 2023-11-14T18:19:07Z

Site: https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Proxy Disclosure [40025] total: 12:
- Timestamp Disclosure - Unix [10096] total: 1:
- Cookie Slack Detector [90027] total: 12:
- Information Disclosure - Suspicious Comments [10027] total: 5:
Site: https://ofm-frontend-uat-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://ofm-frontend-uat-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- Proxy Disclosure [40025] total: 1:
  - https://ofm-frontend-uat-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- Cookie with SameSite Attribute None [10054] total: 1:
  - https://ofm-frontend-uat-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- Cookie without SameSite Attribute [10054] total: 1:
  - https://ofm-frontend-uat-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- Permissions Policy Header Not Set [10063] total: 3:
- Strict-Transport-Security Header Not Set [10035] total: 3:
- Cookie Slack Detector [90027] total: 1:
  - https://ofm-frontend-uat-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- Non-Storable Content [10049] total: 4:
- Session Management Response Identified [10112] total: 1:
  - https://ofm-frontend-uat-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6867770010

github-actions · 2023-11-14T20:07:31Z

Site: https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- Proxy Disclosure [40025] total: 12:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca/assets/index-6e3cd98c.css
- Cookie Slack Detector [90027] total: 12:
- Information Disclosure - Suspicious Comments [10027] total: 5:

View the following link to download the report.
RunnerID:6868886372

github-actions · 2023-11-14T20:08:00Z

Site: https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6868884739

github-actions · 2023-11-14T22:48:18Z

Site: https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- Proxy Disclosure [40025] total: 14:
- Timestamp Disclosure - Unix [10096] total: 1:
- Cookie Slack Detector [90027] total: 14:
- Information Disclosure - Suspicious Comments [10027] total: 5:
- User Agent Fuzzer [10104] total: 12:
Site: https://ofm-frontend-uat-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://ofm-frontend-uat-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- Proxy Disclosure [40025] total: 1:
  - https://ofm-frontend-uat-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- Cookie with SameSite Attribute None [10054] total: 1:
  - https://ofm-frontend-uat-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- Cookie without SameSite Attribute [10054] total: 1:
  - https://ofm-frontend-uat-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- Permissions Policy Header Not Set [10063] total: 3:
- Strict-Transport-Security Header Not Set [10035] total: 3:
- Cookie Slack Detector [90027] total: 1:
  - https://ofm-frontend-uat-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- Non-Storable Content [10049] total: 4:
- Session Management Response Identified [10112] total: 1:
  - https://ofm-frontend-uat-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6870401171

github-actions · 2023-11-14T23:42:16Z

Site: https://ofm-frontend-uat-e1800b-test.apps.silver.devops.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 4:
- CSP: style-src unsafe-inline [10055] total: 4:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://ofm-frontend-uat-e1800b-test.apps.silver.devops.gov.bc.ca/api
- Proxy Disclosure [40025] total: 14:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://ofm-frontend-uat-e1800b-test.apps.silver.devops.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 6:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://ofm-frontend-uat-e1800b-test.apps.silver.devops.gov.bc.ca/assets/index-8c2f5e46.css
- Cookie Slack Detector [90027] total: 14:
- Information Disclosure - Suspicious Comments [10027] total: 5:
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 10:
- Session Management Response Identified [10112] total: 5:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6870828405

github-actions · 2023-11-17T17:21:49Z

Site: https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 4:
- CSP: style-src unsafe-inline [10055] total: 4:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- Proxy Disclosure [40025] total: 14:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 6:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca/assets/index-6e3cd98c.css
- Cookie Slack Detector [90027] total: 14:
- Information Disclosure - Suspicious Comments [10027] total: 5:
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 10:
- Session Management Response Identified [10112] total: 6:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6907066864

github-actions · 2023-11-17T17:30:17Z

Site: https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6907160838

github-actions · 2023-11-17T23:46:09Z

Site: https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6910226389

github-actions · 2023-11-20T18:49:58Z

Site: https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6934496581

github-actions · 2023-11-20T18:50:43Z

Site: https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://ofm-frontend-test-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6934495749

github-actions · 2023-11-21T21:08:54Z

Site: https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 4:
- CSP: style-src unsafe-inline [10055] total: 4:
- Proxy Disclosure [40025] total: 12:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca
  - https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 6:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca/assets/index-90c02749.css
- Cookie Slack Detector [90027] total: 12:
- Information Disclosure - Suspicious Comments [10027] total: 5:
- Modern Web Application [10109] total: 4:
- Non-Storable Content [10049] total: 9:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report.
RunnerID:6949523640

github-actions · 2023-11-21T21:27:32Z

Site: https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6949679728

github-actions · 2023-11-23T22:49:08Z

Site: https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6974833432

github-actions · 2023-11-24T22:23:48Z

Site: https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6985200056

github-actions · 2023-11-27T21:58:17Z

Site: https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7011060015

github-actions · 2023-11-28T19:00:29Z

Site: https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7023225376

github-actions · 2023-12-01T06:39:33Z

Site: https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7056681135

github-actions · 2023-12-01T06:41:02Z

Site: https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7056680718

github-actions · 2023-12-04T02:47:31Z

Site: https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7081343660

github-actions · 2023-12-04T18:52:44Z

Site: https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7091128771

github-actions · 2023-12-04T18:59:19Z

Site: https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7091202313

github-actions · 2023-12-06T17:17:47Z

Site: https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca
New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7117864175

github-actions · 2023-12-07T23:49:30Z

Site: https://ofm-frontend-dev-e1800b-dev.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7135359885