ZAP Full Scan Report

- Site: [http://dev.workwitheducation.gov.bc.ca](http://dev.workwitheducation.gov.bc.ca)
**New Alerts**
- **Non-Storable Content** [10049] total: 1:
- [http://dev.workwitheducation.gov.bc.ca/Dashboard](http://dev.workwitheducation.gov.bc.ca/Dashboard)

- Site: [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
**New Alerts**
- **Proxy Disclosure** [40025] total: 10:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/css](https://dev.workwitheducation.gov.bc.ca/css)
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- ..
- **Bypassing 403** [40038] total: 2:
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- **Content Security Policy (CSP) Header Not Set** [10038] total: 2:
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/sitemap.xml](https://dev.workwitheducation.gov.bc.ca/sitemap.xml)
- **Insecure HTTP Method - TRACE** [90028] total: 4:
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/logo-banner.png](https://dev.workwitheducation.gov.bc.ca/logo-banner.png)
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- **Sub Resource Integrity Attribute Missing** [90003] total: 2:
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/sitemap.xml](https://dev.workwitheducation.gov.bc.ca/sitemap.xml)
- **Vulnerable JS Library** [10003] total: 1:
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- **Big Redirect Detected (Potential Sensitive Information Leak)** [10044] total: 2:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- **Cookie No HttpOnly Flag** [10010] total: 3:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- **Cookie Slack Detector** [90027] total: 10:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/css](https://dev.workwitheducation.gov.bc.ca/css)
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- ..
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- **Cookie without SameSite Attribute** [10054] total: 6:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- ..
- **Dangerous JS Functions** [10110] total: 1:
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 7:
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/logo-banner.png](https://dev.workwitheducation.gov.bc.ca/logo-banner.png)
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- ..
- **Permissions Policy Header Not Set** [10063] total: 3:
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/sitemap.xml](https://dev.workwitheducation.gov.bc.ca/sitemap.xml)
- **Server Leaks Version Information via "Server" HTTP Response Header Field** [10036] total: 8:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- ..
- **Strict-Transport-Security Header Not Set** [10035] total: 8:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- ..
- **Timestamp Disclosure - Unix** [10096] total: 17:
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 1:
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- **Non-Storable Content** [10049] total: 4:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/sitemap.xml](https://dev.workwitheducation.gov.bc.ca/sitemap.xml)
- **Re-examine Cache-control Directives** [10015] total: 2:
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- **Session Management Response Identified** [10112] total: 5:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- **Storable and Cacheable Content** [10049] total: 4:
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/logo-banner.png](https://dev.workwitheducation.gov.bc.ca/logo-banner.png)
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- **User Agent Fuzzer** [10104] total: 52:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- ..

View the [following link](https://github.com/bcgov/EDUC-ECAS/actions/runs/13189357184) to download the report.
RunnerID:13189357184

Start with the linked GitHub Actions ZAP report and inspect the affected Dashboard, /js/app.js, /css/app.css, and response headers. The report lists many distinct alerts across the application, so completion would require defining and addressing the selected findings, then rerunning the scan to verify them.

Written by the indexing model from the issue text.