ZAP API Scan Report

- Site: [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules)
- **Unexpected Content-Type was returned** [100001] total: 3:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **A Client Error response code was returned by the server** [100000] total: 86:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/._darcs](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/.bzr](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Non-Storable Content** [10049] total: 2:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules)
- **Session Management Response Identified** [10112] total: 2:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules)

View the [following link](https://github.com/bcgov/EDUC-RULE-ENGINE-API/actions/runs/8796458517) to download the report.
RunnerID:8796458517

---
ZAP is supported by the [Crash Override Open Source Fellowship](https://crashoverride.com/?zap=act)

Bắt đầu với báo cáo ZAP được liên kết từ lần chạy GitHub Actions 8796458517 và xem xét các cảnh báo được liệt kê cùng các API endpoint bị ảnh hưởng, bao gồm /api/v1/api-docs và /api/v1/rule-engine/run-grad-algorithm-rules. Xác định những phát hiện nào yêu cầu thay đổi trong Java API, ghi lại phạm vi khắc phục và chạy lại quá trình quét để xác nhận các cảnh báo áp dụng đã được giải quyết.

Do mô hình lập chỉ mục viết ra từ nội dung của issue.