ZAP Scan Baseline Report

- Site: [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 2:
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/)
- **Missing Anti-clickjacking Header** [10020] total: 2:
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/)
- **Dangerous JS Functions** [10110] total: 2:
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-bundle.js](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-bundle.js)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-bundle.js](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-bundle.js)
- **Permissions Policy Header Not Set** [10063] total: 8:
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-bundle.js](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-bundle.js)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-init.js](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-init.js)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-standalone-preset.js](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-standalone-preset.js)
- ..
- **Strict-Transport-Security Header Not Set** [10035] total: 11:
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-16x16.png](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-16x16.png)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-32x32.png](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-32x32.png)
- ..
- **Timestamp Disclosure - Unix** [10096] total: 35:
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-standalone-preset.js](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-standalone-preset.js)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-standalone-preset.js](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-standalone-preset.js)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-standalone-preset.js](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-standalone-preset.js)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-standalone-preset.js](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-standalone-preset.js)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-standalone-preset.js](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-standalone-preset.js)
- ..
- **X-Content-Type-Options Header Missing** [10021] total: 11:
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-16x16.png](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-16x16.png)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-32x32.png](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-32x32.png)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-init.js](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-init.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 6:
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-bundle.js](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-bundle.js)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-init.js](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-init.js)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-standalone-preset.js](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-standalone-preset.js)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-bundle.js](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-bundle.js)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-init.js](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-init.js)
- ..
- **Modern Web Application** [10109] total: 2:
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/)
- **Re-examine Cache-control Directives** [10015] total: 2:
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/)
- **Storable and Cacheable Content** [10049] total: 6:
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-init.js](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-init.js)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/robots.txt](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/robots.txt)
- ..
- **Storable but Non-Cacheable Content** [10049] total: 4:
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-16x16.png](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-16x16.png)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-32x32.png](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-32x32.png)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/favicon-32x32.png](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/favicon-32x32.png)
- [https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui.css](https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui.css)

View the [following link](https://github.com/bcgov/PaymentCommonComponent/actions/runs/5271057857) to download the report.
RunnerID:5271057857