ZAP Full Scan Report

- Site: [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **CSP: Wildcard Directive** [10055] total: 4:
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/robots.txt](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **CSP: style-src unsafe-inline** [10055] total: 4:
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/robots.txt](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Proxy Disclosure** [40025] total: 35:
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/bcid-apple-touch-icon.png](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/bcid-apple-touch-icon.png)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/css](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/css)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/css/app~d0ae3f07.7aee22e4.css](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/css/app~d0ae3f07.7aee22e4.css)
- ..
- **Cookie with SameSite Attribute None** [10054] total: 3:
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/robots.txt](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/robots.txt)
- **Cookie Slack Detector** [90027] total: 35:
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/bcid-apple-touch-icon.png](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/bcid-apple-touch-icon.png)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/css](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/css)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/css/app~d0ae3f07.7aee22e4.css](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/css/app~d0ae3f07.7aee22e4.css)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 7:
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/js/app~d0ae3f07.a78e7a12.js](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/js/app~d0ae3f07.a78e7a12.js)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/js/chunk-vendors~0605657e.7e9b6c05.js](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/js/chunk-vendors~0605657e.7e9b6c05.js)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/js/chunk-vendors~0a56fd24.a00e1749.js](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/js/chunk-vendors~0a56fd24.a00e1749.js)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/js/chunk-vendors~253ae210.c42b4769.js](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/js/chunk-vendors~253ae210.c42b4769.js)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/js/chunk-vendors~793fb972.69b2cac7.js](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/js/chunk-vendors~793fb972.69b2cac7.js)
- ..
- **Modern Web Application** [10109] total: 5:
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/js/chunk-vendors~253ae210.c42b4769.js](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/js/chunk-vendors~253ae210.c42b4769.js)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/robots.txt](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://educ-frontend-b43d2d-test.apps.silver.devops.gov.bc.ca/sitemap.xml)

View the [following link](https://github.com/bcgov/EDUC-CCOF/actions/runs/3228889270) to download the report.
RunnerID:3228889270

Start with the linked GitHub Actions ZAP report for the deployed EDUC-CCOF application and review each listed alert, including CSP directives, cookie attributes, proxy disclosure, and suspicious comments. The issue does not name source files or acceptance criteria; done would require addressing the applicable findings and rerunning the scan to verify the report.

Written by the indexing model from the issue text.