ZAP Full Scan Report

- Site: [http://dev.workwitheducation.gov.bc.ca](http://dev.workwitheducation.gov.bc.ca)
**New Alerts**
- **Non-Storable Content** [10049] total: 1:
- [http://dev.workwitheducation.gov.bc.ca/Dashboard](http://dev.workwitheducation.gov.bc.ca/Dashboard)

- Site: [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
**New Alerts**
- **Proxy Disclosure** [40025] total: 10:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/css](https://dev.workwitheducation.gov.bc.ca/css)
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- ..
- **Bypassing 403** [40038] total: 2:
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- **Content Security Policy (CSP) Header Not Set** [10038] total: 2:
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/sitemap.xml](https://dev.workwitheducation.gov.bc.ca/sitemap.xml)
- **Insecure HTTP Method - TRACE** [90028] total: 4:
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/logo-banner.png](https://dev.workwitheducation.gov.bc.ca/logo-banner.png)
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- **Sub Resource Integrity Attribute Missing** [90003] total: 2:
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/sitemap.xml](https://dev.workwitheducation.gov.bc.ca/sitemap.xml)
- **Vulnerable JS Library** [10003] total: 1:
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- **Big Redirect Detected (Potential Sensitive Information Leak)** [10044] total: 2:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- **Cookie No HttpOnly Flag** [10010] total: 3:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- **Cookie Slack Detector** [90027] total: 10:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/css](https://dev.workwitheducation.gov.bc.ca/css)
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- ..
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- **Cookie without SameSite Attribute** [10054] total: 6:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- ..
- **Dangerous JS Functions** [10110] total: 1:
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 7:
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/logo-banner.png](https://dev.workwitheducation.gov.bc.ca/logo-banner.png)
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- ..
- **Permissions Policy Header Not Set** [10063] total: 3:
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/sitemap.xml](https://dev.workwitheducation.gov.bc.ca/sitemap.xml)
- **Server Leaks Version Information via "Server" HTTP Response Header Field** [10036] total: 8:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- ..
- **Strict-Transport-Security Header Not Set** [10035] total: 8:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- ..
- **Timestamp Disclosure - Unix** [10096] total: 17:
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 1:
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- **Non-Storable Content** [10049] total: 4:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/sitemap.xml](https://dev.workwitheducation.gov.bc.ca/sitemap.xml)
- **Re-examine Cache-control Directives** [10015] total: 2:
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- **Session Management Response Identified** [10112] total: 5:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- **Storable and Cacheable Content** [10049] total: 4:
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/logo-banner.png](https://dev.workwitheducation.gov.bc.ca/logo-banner.png)
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- **User Agent Fuzzer** [10104] total: 52:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- ..

View the [following link](https://github.com/bcgov/EDUC-ECAS/actions/runs/13144808778) to download the report.
RunnerID:13144808778

Start with the linked GitHub Actions ZAP report and inspect the affected entry points, including js/app.js, css/app.css, Dashboard, robots.txt, and sitemap.xml. Triage the listed alerts into actionable application or deployment changes, then rerun the scan and confirm that the selected findings are resolved.

Written by the indexing model from the issue text.