DEV - ZAP Full Scan Report

- Site: [https://dev.ehpr.freshworks.club](https://dev.ehpr.freshworks.club)
**New Alerts**
- **CSP: script-src unsafe-eval** [10055] total: 4:
- [https://dev.ehpr.freshworks.club/](https://dev.ehpr.freshworks.club/)
- [https://dev.ehpr.freshworks.club/login](https://dev.ehpr.freshworks.club/login)
- [https://dev.ehpr.freshworks.club/robots.txt](https://dev.ehpr.freshworks.club/robots.txt)
- [https://dev.ehpr.freshworks.club/sitemap.xml](https://dev.ehpr.freshworks.club/sitemap.xml)
- **CSP: style-src unsafe-inline** [10055] total: 4:
- [https://dev.ehpr.freshworks.club/](https://dev.ehpr.freshworks.club/)
- [https://dev.ehpr.freshworks.club/login](https://dev.ehpr.freshworks.club/login)
- [https://dev.ehpr.freshworks.club/robots.txt](https://dev.ehpr.freshworks.club/robots.txt)
- [https://dev.ehpr.freshworks.club/sitemap.xml](https://dev.ehpr.freshworks.club/sitemap.xml)
- **Vulnerable JS Library** [10003] total: 1:
- [https://dev.ehpr.freshworks.club/_next/static/chunks/main-a6668b91e7e3748f.js](https://dev.ehpr.freshworks.club/_next/static/chunks/main-a6668b91e7e3748f.js)
- **Dangerous JS Functions** [10110] total: 1:
- [https://dev.ehpr.freshworks.club/_next/static/chunks/pages/_app-65a6f88e32992d4e.js](https://dev.ehpr.freshworks.club/_next/static/chunks/pages/_app-65a6f88e32992d4e.js)
- **Permissions Policy Header Not Set** [10063] total: 11:
- [https://dev.ehpr.freshworks.club/](https://dev.ehpr.freshworks.club/)
- [https://dev.ehpr.freshworks.club/_next/static/chunks/framework-c4190dd27fdc6a34.js](https://dev.ehpr.freshworks.club/_next/static/chunks/framework-c4190dd27fdc6a34.js)
- [https://dev.ehpr.freshworks.club/_next/static/chunks/main-a6668b91e7e3748f.js](https://dev.ehpr.freshworks.club/_next/static/chunks/main-a6668b91e7e3748f.js)
- [https://dev.ehpr.freshworks.club/_next/static/chunks/pages/index-d9a1454ed7a3bba6.js](https://dev.ehpr.freshworks.club/_next/static/chunks/pages/index-d9a1454ed7a3bba6.js)
- [https://dev.ehpr.freshworks.club/_next/static/chunks/polyfills-5cd94c89d3acac5f.js](https://dev.ehpr.freshworks.club/_next/static/chunks/polyfills-5cd94c89d3acac5f.js)
- ..
- **Timestamp Disclosure - Unix** [10096] total: 22:
- [https://dev.ehpr.freshworks.club/_next/static/chunks/pages/_app-65a6f88e32992d4e.js](https://dev.ehpr.freshworks.club/_next/static/chunks/pages/_app-65a6f88e32992d4e.js)
- [https://dev.ehpr.freshworks.club/_next/static/chunks/pages/_app-65a6f88e32992d4e.js](https://dev.ehpr.freshworks.club/_next/static/chunks/pages/_app-65a6f88e32992d4e.js)
- [https://dev.ehpr.freshworks.club/_next/static/chunks/pages/_app-65a6f88e32992d4e.js](https://dev.ehpr.freshworks.club/_next/static/chunks/pages/_app-65a6f88e32992d4e.js)
- [https://dev.ehpr.freshworks.club/_next/static/chunks/pages/_app-65a6f88e32992d4e.js](https://dev.ehpr.freshworks.club/_next/static/chunks/pages/_app-65a6f88e32992d4e.js)
- [https://dev.ehpr.freshworks.club/_next/static/chunks/pages/_app-65a6f88e32992d4e.js](https://dev.ehpr.freshworks.club/_next/static/chunks/pages/_app-65a6f88e32992d4e.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 10:
- [https://dev.ehpr.freshworks.club/](https://dev.ehpr.freshworks.club/)
- [https://dev.ehpr.freshworks.club/_next/static/chunks/framework-c4190dd27fdc6a34.js](https://dev.ehpr.freshworks.club/_next/static/chunks/framework-c4190dd27fdc6a34.js)
- [https://dev.ehpr.freshworks.club/_next/static/chunks/main-a6668b91e7e3748f.js](https://dev.ehpr.freshworks.club/_next/static/chunks/main-a6668b91e7e3748f.js)
- [https://dev.ehpr.freshworks.club/_next/static/chunks/pages/_app-65a6f88e32992d4e.js](https://dev.ehpr.freshworks.club/_next/static/chunks/pages/_app-65a6f88e32992d4e.js)
- [https://dev.ehpr.freshworks.club/_next/static/chunks/pages/login-ace468d70212fcb4.js](https://dev.ehpr.freshworks.club/_next/static/chunks/pages/login-ace468d70212fcb4.js)
- ..
- **Modern Web Application** [10109] total: 4:
- [https://dev.ehpr.freshworks.club/](https://dev.ehpr.freshworks.club/)
- [https://dev.ehpr.freshworks.club/login](https://dev.ehpr.freshworks.club/login)
- [https://dev.ehpr.freshworks.club/robots.txt](https://dev.ehpr.freshworks.club/robots.txt)
- [https://dev.ehpr.freshworks.club/sitemap.xml](https://dev.ehpr.freshworks.club/sitemap.xml)
- **Non-Storable Content** [10049] total: 11:
- [https://dev.ehpr.freshworks.club/](https://dev.ehpr.freshworks.club/)
- [https://dev.ehpr.freshworks.club/_next/static/chunks/framework-c4190dd27fdc6a34.js](https://dev.ehpr.freshworks.club/_next/static/chunks/framework-c4190dd27fdc6a34.js)
- [https://dev.ehpr.freshworks.club/_next/static/chunks/main-a6668b91e7e3748f.js](https://dev.ehpr.freshworks.club/_next/static/chunks/main-a6668b91e7e3748f.js)
- [https://dev.ehpr.freshworks.club/_next/static/chunks/pages/index-d9a1454ed7a3bba6.js](https://dev.ehpr.freshworks.club/_next/static/chunks/pages/index-d9a1454ed7a3bba6.js)
- [https://dev.ehpr.freshworks.club/_next/static/chunks/polyfills-5cd94c89d3acac5f.js](https://dev.ehpr.freshworks.club/_next/static/chunks/polyfills-5cd94c89d3acac5f.js)
- ..
- **Re-examine Cache-control Directives** [10015] total: 4:
- [https://dev.ehpr.freshworks.club/](https://dev.ehpr.freshworks.club/)
- [https://dev.ehpr.freshworks.club/login](https://dev.ehpr.freshworks.club/login)
- [https://dev.ehpr.freshworks.club/robots.txt](https://dev.ehpr.freshworks.club/robots.txt)
- [https://dev.ehpr.freshworks.club/sitemap.xml](https://dev.ehpr.freshworks.club/sitemap.xml)

View the [following link](https://github.com/bcgov/ehpr2/actions/runs/8359561711) to download the report.
RunnerID:8359561711

Start with the ZAP report linked from Actions run 8359561711 and inspect the listed deployed URLs and _next JavaScript chunks. Determine which reported alerts require changes in the application or deployment configuration, then rerun the full scan; done means the actionable findings are resolved or reviewed and documented.

Written by the indexing model from the issue text.