ZAP Full Scan Report

- Site: [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
**New Alerts**
- **CSP: Wildcard Directive** [10055] total: 4:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/robots.txt](https://dev.mychildcareservices.gov.bc.ca/robots.txt)
- [https://dev.mychildcareservices.gov.bc.ca/sitemap.xml](https://dev.mychildcareservices.gov.bc.ca/sitemap.xml)
- **CSP: style-src unsafe-inline** [10055] total: 4:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/robots.txt](https://dev.mychildcareservices.gov.bc.ca/robots.txt)
- [https://dev.mychildcareservices.gov.bc.ca/sitemap.xml](https://dev.mychildcareservices.gov.bc.ca/sitemap.xml)
- **Hidden File Found** [40035] total: 4:
- [https://dev.mychildcareservices.gov.bc.ca/._darcs](https://dev.mychildcareservices.gov.bc.ca/._darcs)
- [https://dev.mychildcareservices.gov.bc.ca/.bzr](https://dev.mychildcareservices.gov.bc.ca/.bzr)
- [https://dev.mychildcareservices.gov.bc.ca/.hg](https://dev.mychildcareservices.gov.bc.ca/.hg)
- [https://dev.mychildcareservices.gov.bc.ca/BitKeeper](https://dev.mychildcareservices.gov.bc.ca/BitKeeper)
- **Proxy Disclosure** [40025] total: 15:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/assets](https://dev.mychildcareservices.gov.bc.ca/assets)
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js](https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js)
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-Cm1olwVv.css](https://dev.mychildcareservices.gov.bc.ca/assets/index-Cm1olwVv.css)
- ..
- **Sub Resource Integrity Attribute Missing** [90003] total: 8:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/robots.txt](https://dev.mychildcareservices.gov.bc.ca/robots.txt)
- ..
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- **Deprecated Feature Policy Header Set** [10063] total: 7:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js](https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js)
- [https://dev.mychildcareservices.gov.bc.ca/js/config/config.js](https://dev.mychildcareservices.gov.bc.ca/js/config/config.js)
- [https://dev.mychildcareservices.gov.bc.ca/js/config/snowplow.js](https://dev.mychildcareservices.gov.bc.ca/js/config/snowplow.js)
- ..
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 14:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/bcid-apple-touch-icon.png](https://dev.mychildcareservices.gov.bc.ca/bcid-apple-touch-icon.png)
- [https://dev.mychildcareservices.gov.bc.ca/js/config/config.js](https://dev.mychildcareservices.gov.bc.ca/js/config/config.js)
- [https://dev.mychildcareservices.gov.bc.ca/robots.txt](https://dev.mychildcareservices.gov.bc.ca/robots.txt)
- ..
- **Timestamp Disclosure - Unix** [10096] total: 22:
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js](https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js)
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js](https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js)
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js](https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js)
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js](https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js)
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js](https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js)
- ..
- **Cookie Slack Detector** [90027] total: 15:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/assets](https://dev.mychildcareservices.gov.bc.ca/assets)
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js](https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js)
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-Cm1olwVv.css](https://dev.mychildcareservices.gov.bc.ca/assets/index-Cm1olwVv.css)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 1:
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js](https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js)
- **Modern Web Application** [10109] total: 4:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/robots.txt](https://dev.mychildcareservices.gov.bc.ca/robots.txt)
- [https://dev.mychildcareservices.gov.bc.ca/sitemap.xml](https://dev.mychildcareservices.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 11:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js](https://dev.mychildcareservices.gov.bc.ca/assets/index-BJlcPS0T.js)
- [https://dev.mychildcareservices.gov.bc.ca/assets/index-Cm1olwVv.css](https://dev.mychildcareservices.gov.bc.ca/assets/index-Cm1olwVv.css)
- [https://dev.mychildcareservices.gov.bc.ca/bcid-apple-touch-icon.png](https://dev.mychildcareservices.gov.bc.ca/bcid-apple-touch-icon.png)
- ..
- **Session Management Response Identified** [10112] total: 2:
- [https://dev.mychildcareservices.gov.bc.ca](https://dev.mychildcareservices.gov.bc.ca)
- [https://dev.mychildcareservices.gov.bc.ca/](https://dev.mychildcareservices.gov.bc.ca/)

View the [following link](https://github.com/bcgov/EDUC-CCOF/actions/runs/13682504966) to download the report.
RunnerID:13682504966

---
[ZAP by Checkmarx](https://checkmarx.com/)

Download the ZAP report from GitHub Actions run 13682504966 and inspect the listed endpoints, especially /js/config/config.js, /js/config/snowplow.js, and the generated assets. Determine which alerts are actionable in the application or deployment configuration, then rerun the ZAP scan and confirm the findings are addressed.

Written by the indexing model from the issue text.