New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ZAP Scan Baseline Report #144

Open

github-actions bot opened this issue Jun 14, 2023 · 12 comments

github-actions bot commented Jun 14, 2023

Site: https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com
New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- Missing Anti-clickjacking Header [10020] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- Dangerous JS Functions [10110] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-bundle.js
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-bundle.js
- Permissions Policy Header Not Set [10063] total: 8:
- Strict-Transport-Security Header Not Set [10035] total: 11:
- Timestamp Disclosure - Unix [10096] total: 35:
- X-Content-Type-Options Header Missing [10021] total: 11:
- Information Disclosure - Suspicious Comments [10027] total: 6:
- Modern Web Application [10109] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- Re-examine Cache-control Directives [10015] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- Storable and Cacheable Content [10049] total: 6:
- Storable but Non-Cacheable Content [10049] total: 4:

View the following link to download the report.
RunnerID:5271057857

Author

github-actions bot commented Aug 17, 2023

Site: https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com
New Alerts
- Application Error Disclosure [90022] total: 5:
- Information Disclosure - Debug Error Messages [10023] total: 5:
Resolved Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
- Missing Anti-clickjacking Header [10020] total: 2:
- Dangerous JS Functions [10110] total: 2:
- Permissions Policy Header Not Set [10063] total: 8:
- Timestamp Disclosure - Unix [10096] total: 35:
- X-Content-Type-Options Header Missing [10021] total: 11:
- Information Disclosure - Suspicious Comments [10027] total: 6:
- Modern Web Application [10109] total: 2:
- Re-examine Cache-control Directives [10015] total: 2:

View the following link to download the report.
RunnerID:5892757390

Author

github-actions bot commented Aug 18, 2023

Site: https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com
New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- Missing Anti-clickjacking Header [10020] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- Permissions Policy Header Not Set [10063] total: 8:
- X-Content-Type-Options Header Missing [10021] total: 4:
- Information Disclosure - Suspicious Comments [10027] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-init.js
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-init.js
- Modern Web Application [10109] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- Re-examine Cache-control Directives [10015] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
Resolved Alerts
- Application Error Disclosure [90022] total: 5:
- Information Disclosure - Debug Error Messages [10023] total: 5:

View the following link to download the report.
RunnerID:5897294381

Author

github-actions bot commented Aug 23, 2023

Site: https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com
New Alerts
- Dangerous JS Functions [10110] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-bundle.js
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-bundle.js
- Timestamp Disclosure - Unix [10096] total: 37:

View the following link to download the report.
RunnerID:5957282260

Author

github-actions bot commented Aug 24, 2023

Site: https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com
New Alerts
- CSP: Wildcard Directive [10055] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- CSP: script-src unsafe-inline [10055] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- CSP: style-src unsafe-inline [10055] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- CSP: Notices [10055] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
Resolved Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
- Missing Anti-clickjacking Header [10020] total: 2:
- Strict-Transport-Security Header Not Set [10035] total: 11:
- X-Content-Type-Options Header Missing [10021] total: 11:

View the following link to download the report.
RunnerID:5966654499

Author

github-actions bot commented Aug 24, 2023

Site: https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com
New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- Missing Anti-clickjacking Header [10020] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- Strict-Transport-Security Header Not Set [10035] total: 10:
- X-Content-Type-Options Header Missing [10021] total: 11:
Resolved Alerts
- CSP: Wildcard Directive [10055] total: 2:
- CSP: script-src unsafe-inline [10055] total: 2:
- CSP: style-src unsafe-inline [10055] total: 2:
- CSP: Notices [10055] total: 2:

View the following link to download the report.
RunnerID:5968076960

Author

github-actions bot commented Aug 24, 2023

Site: https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com
Resolved Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
- Missing Anti-clickjacking Header [10020] total: 2:
- Strict-Transport-Security Header Not Set [10035] total: 10:
- X-Content-Type-Options Header Missing [10021] total: 11:

View the following link to download the report.
RunnerID:5968093224

Author

github-actions bot commented Aug 24, 2023

Site: https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com
New Alerts
- CSP: Notices [10055] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/

View the following link to download the report.
RunnerID:5968329395

Author

github-actions bot commented Aug 24, 2023

Site: https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com
Resolved Alerts
- CSP: Notices [10055] total: 2:

View the following link to download the report.
RunnerID:5970054859

Author

github-actions bot commented Aug 26, 2023

Site: https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com
New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- Missing Anti-clickjacking Header [10020] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- Strict-Transport-Security Header Not Set [10035] total: 10:
- X-Content-Type-Options Header Missing [10021] total: 11:

View the following link to download the report.
RunnerID:5982172157

Author

github-actions bot commented Aug 28, 2023

Site: https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com
Resolved Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
- Missing Anti-clickjacking Header [10020] total: 2:
- Strict-Transport-Security Header Not Set [10035] total: 10:
- X-Content-Type-Options Header Missing [10021] total: 11:

View the following link to download the report.
RunnerID:6005041751

Author

github-actions bot commented Aug 31, 2023

Site: https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com
New Alerts
- Application Error Disclosure [90022] total: 10:
- Information Disclosure - Debug Error Messages [10023] total: 6:
- Strict-Transport-Security Header Not Set [10035] total: 10:
Resolved Alerts
- Dangerous JS Functions [10110] total: 2:
- Timestamp Disclosure - Unix [10096] total: 37:

View the following link to download the report.
RunnerID:6041015582

Author

github-actions bot commented Sep 5, 2023

Site: https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com
New Alerts
- Dangerous JS Functions [10110] total: 2:
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-bundle.js
  - https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-bundle.js
- Timestamp Disclosure - Unix [10096] total: 37:
Resolved Alerts
- Application Error Disclosure [90022] total: 10:
- Information Disclosure - Debug Error Messages [10023] total: 6:
- Strict-Transport-Security Header Not Set [10035] total: 10:

View the following link to download the report.
RunnerID:6087586177

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment