bcgov / bcgov/PSP

ZAP Full Scan Report

Closed
#309 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TSQL
Stars
7
Forks
27
Avg merge
3d 23h
Merged PRs (30d)
24

Description

- Site: [https://dev-pims.th.gov.bc.ca](https://dev-pims.th.gov.bc.ca)
**New Alerts**
- **Timestamp Disclosure - Unix** [10096] total: 20:
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- ..
- **Server Leaks Version Information via "Server" HTTP Response Header Field** [10036] total: 11:
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/main.64c9f6df.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/main.64c9f6df.chunk.js)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/static/js/runtime-main.90736bf2.js](https://dev-pims.th.gov.bc.ca/static/js/runtime-main.90736bf2.js)
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- ..
- **Cookie Slack Detector** [90027] total: 15:
- [https://dev-pims.th.gov.bc.ca/static/js/runtime-main.90736bf2.js](https://dev-pims.th.gov.bc.ca/static/js/runtime-main.90736bf2.js)
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- ..
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- **Proxy Disclosure** [40025] total: 15:
- [https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static](https://dev-pims.th.gov.bc.ca/static)
- [https://dev-pims.th.gov.bc.ca/logo192.png](https://dev-pims.th.gov.bc.ca/logo192.png)
- [https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css)
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- ..
- **Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s)** [10037] total: 11:
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- [https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css)
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- ..
- **Modern Web Application** [10109] total: 4:
- [https://dev-pims.th.gov.bc.ca/logo192.png](https://dev-pims.th.gov.bc.ca/logo192.png)
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- **Information Disclosure - Suspicious Comments** [10027] total: 2:
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/main.64c9f6df.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/main.64c9f6df.chunk.js)

View the [following link](https://github.com/bcgov/PSP/actions/runs/1288575124) to download the report.
RunnerID:1288575124

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the linked GitHub Actions ZAP report and inspect the deployed site, static assets, response headers, and cookies named in the findings. Done means each listed alert is remediated or explicitly assessed and documented, but the issue does not identify a source file or a specific fix.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, sql
Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.