ZAP Full Scan Report

- Site: [https://hcapemployers.dev.freshworks.club](https://hcapemployers.dev.freshworks.club)
**New Alerts**
- **Hidden File Found** [40035] total: 4:
- [https://hcapemployers.dev.freshworks.club/._darcs](https://hcapemployers.dev.freshworks.club/._darcs)
- [https://hcapemployers.dev.freshworks.club/.bzr](https://hcapemployers.dev.freshworks.club/.bzr)
- [https://hcapemployers.dev.freshworks.club/.hg](https://hcapemployers.dev.freshworks.club/.hg)
- [https://hcapemployers.dev.freshworks.club/BitKeeper](https://hcapemployers.dev.freshworks.club/BitKeeper)
- **Proxy Disclosure** [40025] total: 12:
- [https://hcapemployers.dev.freshworks.club](https://hcapemployers.dev.freshworks.club)
- [https://hcapemployers.dev.freshworks.club/](https://hcapemployers.dev.freshworks.club/)
- [https://hcapemployers.dev.freshworks.club/favicon.ico](https://hcapemployers.dev.freshworks.club/favicon.ico)
- [https://hcapemployers.dev.freshworks.club/ie.js](https://hcapemployers.dev.freshworks.club/ie.js)
- [https://hcapemployers.dev.freshworks.club/robots.txt](https://hcapemployers.dev.freshworks.club/robots.txt)
- ..
- **Cookie No HttpOnly Flag** [10010] total: 10:
- [https://hcapemployers.dev.freshworks.club](https://hcapemployers.dev.freshworks.club)
- [https://hcapemployers.dev.freshworks.club/](https://hcapemployers.dev.freshworks.club/)
- [https://hcapemployers.dev.freshworks.club/favicon.ico](https://hcapemployers.dev.freshworks.club/favicon.ico)
- [https://hcapemployers.dev.freshworks.club/ie.js](https://hcapemployers.dev.freshworks.club/ie.js)
- [https://hcapemployers.dev.freshworks.club/robots.txt](https://hcapemployers.dev.freshworks.club/robots.txt)
- ..
- **Cookie Without Secure Flag** [10011] total: 10:
- [https://hcapemployers.dev.freshworks.club](https://hcapemployers.dev.freshworks.club)
- [https://hcapemployers.dev.freshworks.club/](https://hcapemployers.dev.freshworks.club/)
- [https://hcapemployers.dev.freshworks.club/favicon.ico](https://hcapemployers.dev.freshworks.club/favicon.ico)
- [https://hcapemployers.dev.freshworks.club/ie.js](https://hcapemployers.dev.freshworks.club/ie.js)
- [https://hcapemployers.dev.freshworks.club/robots.txt](https://hcapemployers.dev.freshworks.club/robots.txt)
- ..
- **Cookie without SameSite Attribute** [10054] total: 10:
- [https://hcapemployers.dev.freshworks.club](https://hcapemployers.dev.freshworks.club)
- [https://hcapemployers.dev.freshworks.club/](https://hcapemployers.dev.freshworks.club/)
- [https://hcapemployers.dev.freshworks.club/favicon.ico](https://hcapemployers.dev.freshworks.club/favicon.ico)
- [https://hcapemployers.dev.freshworks.club/ie.js](https://hcapemployers.dev.freshworks.club/ie.js)
- [https://hcapemployers.dev.freshworks.club/robots.txt](https://hcapemployers.dev.freshworks.club/robots.txt)
- ..
- **Dangerous JS Functions** [10110] total: 1:
- [https://hcapemployers.dev.freshworks.club/static/js/10.404f639a.chunk.js](https://hcapemployers.dev.freshworks.club/static/js/10.404f639a.chunk.js)
- **Permissions Policy Header Not Set** [10063] total: 9:
- [https://hcapemployers.dev.freshworks.club](https://hcapemployers.dev.freshworks.club)
- [https://hcapemployers.dev.freshworks.club/](https://hcapemployers.dev.freshworks.club/)
- [https://hcapemployers.dev.freshworks.club/ie.js](https://hcapemployers.dev.freshworks.club/ie.js)
- [https://hcapemployers.dev.freshworks.club/robots.txt](https://hcapemployers.dev.freshworks.club/robots.txt)
- [https://hcapemployers.dev.freshworks.club/sitemap.xml](https://hcapemployers.dev.freshworks.club/sitemap.xml)
- ..
- **Timestamp Disclosure - Unix** [10096] total: 35:
- [https://hcapemployers.dev.freshworks.club/static/js/10.404f639a.chunk.js](https://hcapemployers.dev.freshworks.club/static/js/10.404f639a.chunk.js)
- [https://hcapemployers.dev.freshworks.club/static/js/10.404f639a.chunk.js](https://hcapemployers.dev.freshworks.club/static/js/10.404f639a.chunk.js)
- [https://hcapemployers.dev.freshworks.club/static/js/10.404f639a.chunk.js](https://hcapemployers.dev.freshworks.club/static/js/10.404f639a.chunk.js)
- [https://hcapemployers.dev.freshworks.club/static/js/10.404f639a.chunk.js](https://hcapemployers.dev.freshworks.club/static/js/10.404f639a.chunk.js)
- [https://hcapemployers.dev.freshworks.club/static/js/10.404f639a.chunk.js](https://hcapemployers.dev.freshworks.club/static/js/10.404f639a.chunk.js)
- ..
- **Cookie Slack Detector** [90027] total: 12:
- [https://hcapemployers.dev.freshworks.club](https://hcapemployers.dev.freshworks.club)
- [https://hcapemployers.dev.freshworks.club/](https://hcapemployers.dev.freshworks.club/)
- [https://hcapemployers.dev.freshworks.club/favicon.ico](https://hcapemployers.dev.freshworks.club/favicon.ico)
- [https://hcapemployers.dev.freshworks.club/ie.js](https://hcapemployers.dev.freshworks.club/ie.js)
- [https://hcapemployers.dev.freshworks.club/robots.txt](https://hcapemployers.dev.freshworks.club/robots.txt)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 2:
- [https://hcapemployers.dev.freshworks.club/static/js/10.404f639a.chunk.js](https://hcapemployers.dev.freshworks.club/static/js/10.404f639a.chunk.js)
- [https://hcapemployers.dev.freshworks.club/static/js/main.f33d4dc7.chunk.js](https://hcapemployers.dev.freshworks.club/static/js/main.f33d4dc7.chunk.js)
- **Modern Web Application** [10109] total: 5:
- [https://hcapemployers.dev.freshworks.club](https://hcapemployers.dev.freshworks.club)
- [https://hcapemployers.dev.freshworks.club/](https://hcapemployers.dev.freshworks.club/)
- [https://hcapemployers.dev.freshworks.club/](https://hcapemployers.dev.freshworks.club/)
- [https://hcapemployers.dev.freshworks.club/robots.txt](https://hcapemployers.dev.freshworks.club/robots.txt)
- [https://hcapemployers.dev.freshworks.club/sitemap.xml](https://hcapemployers.dev.freshworks.club/sitemap.xml)
- **Non-Storable Content** [10049] total: 10:
- [https://hcapemployers.dev.freshworks.club](https://hcapemployers.dev.freshworks.club)
- [https://hcapemployers.dev.freshworks.club/](https://hcapemployers.dev.freshworks.club/)
- [https://hcapemployers.dev.freshworks.club/favicon.ico](https://hcapemployers.dev.freshworks.club/favicon.ico)
- [https://hcapemployers.dev.freshworks.club/ie.js](https://hcapemployers.dev.freshworks.club/ie.js)
- [https://hcapemployers.dev.freshworks.club/robots.txt](https://hcapemployers.dev.freshworks.club/robots.txt)
- ..
- **Re-examine Cache-control Directives** [10015] total: 4:
- [https://hcapemployers.dev.freshworks.club](https://hcapemployers.dev.freshworks.club)
- [https://hcapemployers.dev.freshworks.club/](https://hcapemployers.dev.freshworks.club/)
- [https://hcapemployers.dev.freshworks.club/robots.txt](https://hcapemployers.dev.freshworks.club/robots.txt)
- [https://hcapemployers.dev.freshworks.club/sitemap.xml](https://hcapemployers.dev.freshworks.club/sitemap.xml)
- **User Agent Fuzzer** [10104] total: 72:
- [https://hcapemployers.dev.freshworks.club](https://hcapemployers.dev.freshworks.club)
- [https://hcapemployers.dev.freshworks.club](https://hcapemployers.dev.freshworks.club)
- [https://hcapemployers.dev.freshworks.club](https://hcapemployers.dev.freshworks.club)
- [https://hcapemployers.dev.freshworks.club](https://hcapemployers.dev.freshworks.club)
- [https://hcapemployers.dev.freshworks.club](https://hcapemployers.dev.freshworks.club)
- ..
- **Vulnerable JS Library** [10003] total: 1:
- [https://hcapemployers.dev.freshworks.club/static/js/10.404f639a.chunk.js](https://hcapemployers.dev.freshworks.club/static/js/10.404f639a.chunk.js)

View the [following link](https://github.com/bcgov/hcap/actions/runs/12322735841) to download the report.
RunnerID:12322735841

---
[ZAP by Checkmarx](https://checkmarx.com/)

Download the ZAP report from the linked GitHub Actions run and review the findings for the deployed site, especially the JavaScript chunks and reported cookie, header, hidden-file, and library alerts. Determine which findings are applicable to this application; done means the applicable issues are addressed or documented and a follow-up scan verifies the result.

Written by the indexing model from the issue text.