bcgov / bcgov/PSP

ZAP Full Scan Report

Open
#247 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TSQL
Stars
7
Forks
27
Avg merge
3d 2h
Merged PRs (30d)
27

Description

- Site: [https://dev-pims.th.gov.bc.ca](https://dev-pims.th.gov.bc.ca)
**New Alerts**
- **Timestamp Disclosure - Unix** [10096] total: 20:
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- ..
- **Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s)** [10037] total: 11:
- [https://dev-pims.th.gov.bc.ca/static/js/runtime-main.0c71865d.js](https://dev-pims.th.gov.bc.ca/static/js/runtime-main.0c71865d.js)
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- [https://dev-pims.th.gov.bc.ca/static/js/main.73f46a50.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/main.73f46a50.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css)
- ..
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- **Proxy Disclosure** [40025] total: 15:
- [https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static](https://dev-pims.th.gov.bc.ca/static)
- [https://dev-pims.th.gov.bc.ca/logo192.png](https://dev-pims.th.gov.bc.ca/logo192.png)
- [https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- ..
- **Server Leaks Version Information via "Server" HTTP Response Header Field** [10036] total: 11:
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- [https://dev-pims.th.gov.bc.ca/favicon.ico](https://dev-pims.th.gov.bc.ca/favicon.ico)
- ..
- **Cookie Slack Detector** [90027] total: 15:
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- [https://dev-pims.th.gov.bc.ca/static/js](https://dev-pims.th.gov.bc.ca/static/js)
- [https://dev-pims.th.gov.bc.ca/static/css](https://dev-pims.th.gov.bc.ca/static/css)
- ..
- **Modern Web Application** [10109] total: 4:
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/logo192.png](https://dev-pims.th.gov.bc.ca/logo192.png)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- **Information Disclosure - Suspicious Comments** [10027] total: 2:
- [https://dev-pims.th.gov.bc.ca/static/js/main.73f46a50.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/main.73f46a50.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)

View the [following link](https://github.com/bcgov/PSP/actions/runs/1259431733) to download the report.
RunnerID:1259431733

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the ZAP report from GitHub Actions run 1259431733 and review the listed dev-pims.th.gov.bc.ca endpoints, response headers, cookies, and static JavaScript bundles. Determine the scope and disposition of each alert; done means all findings have been addressed or their accepted status and rationale are recorded.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
security, web-dev
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.