ZAP Full Scan Report
- Dominant language
- TSQL
- Stars
- 7
- Forks
- 27
- Avg merge
- 3d 16h
- Merged PRs (30d)
- 26
Description
- Site: [https://dev-pims.th.gov.bc.ca](https://dev-pims.th.gov.bc.ca)
**New Alerts**
- **Timestamp Disclosure - Unix** [10096] total: 20:
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- ..
- **Cookie Slack Detector** [90027] total: 15:
- [https://dev-pims.th.gov.bc.ca/static/js/runtime-main.3ad2f547.js](https://dev-pims.th.gov.bc.ca/static/js/runtime-main.3ad2f547.js)
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- ..
- **Server Leaks Version Information via "Server" HTTP Response Header Field** [10036] total: 11:
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/static/js/main.08f976f1.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/main.08f976f1.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/runtime-main.3ad2f547.js](https://dev-pims.th.gov.bc.ca/static/js/runtime-main.3ad2f547.js)
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- ..
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- **Proxy Disclosure** [40025] total: 15:
- [https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static](https://dev-pims.th.gov.bc.ca/static)
- [https://dev-pims.th.gov.bc.ca/logo192.png](https://dev-pims.th.gov.bc.ca/logo192.png)
- [https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css)
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- ..
- **Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s)** [10037] total: 11:
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- [https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css)
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 2:
- [https://dev-pims.th.gov.bc.ca/static/js/main.08f976f1.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/main.08f976f1.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- **Modern Web Application** [10109] total: 4:
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/logo192.png](https://dev-pims.th.gov.bc.ca/logo192.png)
View the [following link](https://github.com/bcgov/PSP/actions/runs/1292823748) to download the report.
RunnerID:1292823748
Contributor guide
No contributing guide indexed for this repository
Research direction
Download the ZAP report from the linked GitHub Actions run and review the listed alerts and affected URLs. Identify which findings are actionable for this application and define verification for each; the issue is closed and does not name source files, tests, or a specific remediation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 15/100