ZAP Full Scan Report
- Dominant language
- PowerShell
- Stars
- 2
- Forks
- 10
- PR merge metrics
- No merged PRs in 30d
Description
- Site: [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
**New Alerts**
- **Proxy Disclosure** [40025] total: 4:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- [https://dev.workwitheducation.gov.bc.ca/sitemap.xml](https://dev.workwitheducation.gov.bc.ca/sitemap.xml)
- **Content Security Policy (CSP) Header Not Set** [10038] total: 4:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- [https://dev.workwitheducation.gov.bc.ca/sitemap.xml](https://dev.workwitheducation.gov.bc.ca/sitemap.xml)
- **Insecure HTTP Method - TRACE** [90028] total: 1:
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- **Permissions Policy Header Not Set** [10063] total: 4:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- [https://dev.workwitheducation.gov.bc.ca/sitemap.xml](https://dev.workwitheducation.gov.bc.ca/sitemap.xml)
- **Strict-Transport-Security Header Not Set** [10035] total: 4:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- [https://dev.workwitheducation.gov.bc.ca/sitemap.xml](https://dev.workwitheducation.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 4:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- [https://dev.workwitheducation.gov.bc.ca/sitemap.xml](https://dev.workwitheducation.gov.bc.ca/sitemap.xml)
- **User Agent Fuzzer** [10104] total: 48:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- ..
View the [following link](https://github.com/bcgov/EDUC-ECAS/actions/runs/12150079884) to download the report.
RunnerID:12150079884
Contributor guide
No contributing guide indexed for this repository
Research direction
Download the ZAP report from the linked GitHub Actions run and review the findings for the development site, especially the missing security headers, TRACE method, proxy disclosure, non-storable content, and user-agent fuzzer alerts. Trace each alert to the deployment configuration, document the intended remediation, and rerun the full scan to verify the findings are addressed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- laravel, php, powershell
- Domain
- security, web-dev
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100