ZAP Full Scan Report

- Site: [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
**New Alerts**
- **CSP: Failure to Define Directive with No Fallback** [10055] total: 4:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/robots.txt](https://dev.mychildcareservices.gov.bc.ca/robots.txt)
- [https://dev.mychildcareservices.gov.bc.ca/sitemap.xml](https://dev.mychildcareservices.gov.bc.ca/sitemap.xml)
- **CSP: style-src unsafe-inline** [10055] total: 4:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/robots.txt](https://dev.mychildcareservices.gov.bc.ca/robots.txt)
- [https://dev.mychildcareservices.gov.bc.ca/sitemap.xml](https://dev.mychildcareservices.gov.bc.ca/sitemap.xml)
- **Proxy Disclosure** [40025] total: 5:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/assets](https://dev.mychildcareservices.gov.bc.ca/assets)
- [https://dev.mychildcareservices.gov.bc.ca/bcid-apple-touch-icon.png](https://dev.mychildcareservices.gov.bc.ca/bcid-apple-touch-icon.png)
- [https://dev.mychildcareservices.gov.bc.ca/js](https://dev.mychildcareservices.gov.bc.ca/js)
- **Sub Resource Integrity Attribute Missing** [90003] total: 5:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/sitemap.xml](https://dev.mychildcareservices.gov.bc.ca/sitemap.xml)
- **Vulnerable JS Library** [10003] total: 1:
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-CygLNSjJ.js](https://dev.mychildcareservices.gov.bc.ca/assets/index-CygLNSjJ.js)
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- **Cross-Origin-Embedder-Policy Header Missing or Invalid** [90004] total: 4:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/robots.txt](https://dev.mychildcareservices.gov.bc.ca/robots.txt)
- [https://dev.mychildcareservices.gov.bc.ca/sitemap.xml](https://dev.mychildcareservices.gov.bc.ca/sitemap.xml)
- **Cross-Origin-Opener-Policy Header Missing or Invalid** [90004] total: 4:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/robots.txt](https://dev.mychildcareservices.gov.bc.ca/robots.txt)
- [https://dev.mychildcareservices.gov.bc.ca/sitemap.xml](https://dev.mychildcareservices.gov.bc.ca/sitemap.xml)
- **Cross-Origin-Resource-Policy Header Missing or Invalid** [90004] total: 5:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/robots.txt](https://dev.mychildcareservices.gov.bc.ca/robots.txt)
- [https://dev.mychildcareservices.gov.bc.ca/sitemap.xml](https://dev.mychildcareservices.gov.bc.ca/sitemap.xml)
- [https://dev.mychildcareservices.gov.bc.ca/styles/fonts.css](https://dev.mychildcareservices.gov.bc.ca/styles/fonts.css)
- **Deprecated Feature Policy Header Set** [10063] total: 5:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/js/config/config.js](https://dev.mychildcareservices.gov.bc.ca/js/config/config.js)
- [https://dev.mychildcareservices.gov.bc.ca/robots.txt](https://dev.mychildcareservices.gov.bc.ca/robots.txt)
- [https://dev.mychildcareservices.gov.bc.ca/sitemap.xml](https://dev.mychildcareservices.gov.bc.ca/sitemap.xml)
- **Timestamp Disclosure - Unix** [10096] total: 5:
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-CygLNSjJ.js](https://dev.mychildcareservices.gov.bc.ca/assets/index-CygLNSjJ.js)
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-CygLNSjJ.js](https://dev.mychildcareservices.gov.bc.ca/assets/index-CygLNSjJ.js)
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-CygLNSjJ.js](https://dev.mychildcareservices.gov.bc.ca/assets/index-CygLNSjJ.js)
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-CygLNSjJ.js](https://dev.mychildcareservices.gov.bc.ca/assets/index-CygLNSjJ.js)
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-CygLNSjJ.js](https://dev.mychildcareservices.gov.bc.ca/assets/index-CygLNSjJ.js)
- **Cookie Slack Detector** [90027] total: 5:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/assets](https://dev.mychildcareservices.gov.bc.ca/assets)
- [https://dev.mychildcareservices.gov.bc.ca/bcid-apple-touch-icon.png](https://dev.mychildcareservices.gov.bc.ca/bcid-apple-touch-icon.png)
- [https://dev.mychildcareservices.gov.bc.ca/js](https://dev.mychildcareservices.gov.bc.ca/js)
- **Modern Web Application** [10109] total: 4:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/robots.txt](https://dev.mychildcareservices.gov.bc.ca/robots.txt)
- [https://dev.mychildcareservices.gov.bc.ca/sitemap.xml](https://dev.mychildcareservices.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 5:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/robots.txt](https://dev.mychildcareservices.gov.bc.ca/robots.txt)
- [https://dev.mychildcareservices.gov.bc.ca/sitemap.xml](https://dev.mychildcareservices.gov.bc.ca/sitemap.xml)
- [https://dev.mychildcareservices.gov.bc.ca/styles/fonts.css](https://dev.mychildcareservices.gov.bc.ca/styles/fonts.css)
- **Session Management Response Identified** [10112] total: 2:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)

View the [following link](https://github.com/bcgov/EDUC-CCOF/actions/runs/23861432132) to download the report.
RunnerID:23861432132

---
[ZAP by Checkmarx](https://checkmarx.com/)

Download the ZAP report from the linked GitHub Actions run and review each alert against the dev.mychildcareservices.gov.bc.ca responses, including the listed JavaScript asset and endpoints. Done means the applicable findings are addressed and a follow-up ZAP scan confirms the remaining alerts are resolved or documented.

Written by the indexing model from the issue text.