ZAP Full Scan Report

- Site: [http://dev.workwitheducation.gov.bc.ca](http://dev.workwitheducation.gov.bc.ca)
**New Alerts**
- **Non-Storable Content** [10049] total: 1:
- [http://dev.workwitheducation.gov.bc.ca/Dashboard](http://dev.workwitheducation.gov.bc.ca/Dashboard)

- Site: [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
**New Alerts**
- **Proxy Disclosure** [40025] total: 9:
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/css](https://dev.workwitheducation.gov.bc.ca/css)
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/js](https://dev.workwitheducation.gov.bc.ca/js)
- ..
- **Bypassing 403** [40038] total: 2:
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- **Content Security Policy (CSP) Header Not Set** [10038] total: 2:
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/sitemap.xml](https://dev.workwitheducation.gov.bc.ca/sitemap.xml)
- **Insecure HTTP Method - TRACE** [90028] total: 4:
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/logo-banner.png](https://dev.workwitheducation.gov.bc.ca/logo-banner.png)
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- **Sub Resource Integrity Attribute Missing** [90003] total: 2:
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/sitemap.xml](https://dev.workwitheducation.gov.bc.ca/sitemap.xml)
- **Vulnerable JS Library** [10003] total: 1:
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- **Big Redirect Detected (Potential Sensitive Information Leak)** [10044] total: 2:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- **Cookie No HttpOnly Flag** [10010] total: 3:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- **Cookie Slack Detector** [90027] total: 9:
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/css](https://dev.workwitheducation.gov.bc.ca/css)
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/js](https://dev.workwitheducation.gov.bc.ca/js)
- ..
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- **Cookie without SameSite Attribute** [10054] total: 6:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- ..
- **Dangerous JS Functions** [10110] total: 1:
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 7:
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/logo-banner.png](https://dev.workwitheducation.gov.bc.ca/logo-banner.png)
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- ..
- **Permissions Policy Header Not Set** [10063] total: 3:
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/sitemap.xml](https://dev.workwitheducation.gov.bc.ca/sitemap.xml)
- **Server Leaks Version Information via "Server" HTTP Response Header Field** [10036] total: 8:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- ..
- **Strict-Transport-Security Header Not Set** [10035] total: 8:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- ..
- **Timestamp Disclosure - Unix** [10096] total: 16:
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 1:
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- **Non-Storable Content** [10049] total: 4:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/sitemap.xml](https://dev.workwitheducation.gov.bc.ca/sitemap.xml)
- **Re-examine Cache-control Directives** [10015] total: 2:
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- **Session Management Response Identified** [10112] total: 6:
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/Dashboard](https://dev.workwitheducation.gov.bc.ca/Dashboard)
- [https://dev.workwitheducation.gov.bc.ca](https://dev.workwitheducation.gov.bc.ca)
- ..
- **Storable and Cacheable Content** [10049] total: 4:
- [https://dev.workwitheducation.gov.bc.ca/css/app.css](https://dev.workwitheducation.gov.bc.ca/css/app.css)
- [https://dev.workwitheducation.gov.bc.ca/js/app.js](https://dev.workwitheducation.gov.bc.ca/js/app.js)
- [https://dev.workwitheducation.gov.bc.ca/logo-banner.png](https://dev.workwitheducation.gov.bc.ca/logo-banner.png)
- [https://dev.workwitheducation.gov.bc.ca/robots.txt](https://dev.workwitheducation.gov.bc.ca/robots.txt)
- **User Agent Fuzzer** [10104] total: 40:
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- [https://dev.workwitheducation.gov.bc.ca/](https://dev.workwitheducation.gov.bc.ca/)
- ..

View the [following link](https://github.com/bcgov/EDUC-ECAS/actions/runs/17308900571) to download the report.
RunnerID:17308900571

Start with the linked GitHub Actions run and review the ZAP report's listed alerts, affected URLs, and severity before locating the relevant application or deployment configuration. Done means the applicable findings are remediated or explicitly assessed, and a subsequent full scan confirms the result.

Written by the indexing model from the issue text.