bcgov / bcgov/PSP

ZAP Full Scan Report

Closed
#319 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TSQL
Stars
7
Forks
27
Avg merge
3d 23h
Merged PRs (30d)
24

Description

- Site: [https://dev-pims.th.gov.bc.ca](https://dev-pims.th.gov.bc.ca)
**New Alerts**
- **Timestamp Disclosure - Unix** [10096] total: 20:
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- ..
- **Cookie Slack Detector** [90027] total: 15:
- [https://dev-pims.th.gov.bc.ca/static/js/runtime-main.3ad2f547.js](https://dev-pims.th.gov.bc.ca/static/js/runtime-main.3ad2f547.js)
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- ..
- **Server Leaks Version Information via "Server" HTTP Response Header Field** [10036] total: 11:
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/static/js/main.08f976f1.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/main.08f976f1.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/runtime-main.3ad2f547.js](https://dev-pims.th.gov.bc.ca/static/js/runtime-main.3ad2f547.js)
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- ..
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- **Proxy Disclosure** [40025] total: 15:
- [https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static](https://dev-pims.th.gov.bc.ca/static)
- [https://dev-pims.th.gov.bc.ca/logo192.png](https://dev-pims.th.gov.bc.ca/logo192.png)
- [https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css)
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- ..
- **Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s)** [10037] total: 11:
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- [https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css)
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 2:
- [https://dev-pims.th.gov.bc.ca/static/js/main.08f976f1.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/main.08f976f1.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- **Modern Web Application** [10109] total: 4:
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/logo192.png](https://dev-pims.th.gov.bc.ca/logo192.png)

View the [following link](https://github.com/bcgov/PSP/actions/runs/1292822873) to download the report.
RunnerID:1292822873

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the linked GitHub Actions ZAP report and review the listed alerts for the site, JavaScript assets, and response headers. Determine which findings are actionable, then rerun the ZAP scan; done means the relevant alerts are resolved or documented with an accepted rationale.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
security, web-dev
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.