ZAP Full Scan Report

- Site: [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
**New Alerts**
- **Proxy Disclosure** [40025] total: 5:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/favicon.ico](https://dev.hcapemployers.gov.bc.ca/favicon.ico)
- [https://dev.hcapemployers.gov.bc.ca/ie.js](https://dev.hcapemployers.gov.bc.ca/ie.js)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/snowplow-tracker.js](https://dev.hcapemployers.gov.bc.ca/snowplow-tracker.js)
- **Cookie No HttpOnly Flag** [10010] total: 5:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/ie.js](https://dev.hcapemployers.gov.bc.ca/ie.js)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)
- **Cookie Without Secure Flag** [10011] total: 5:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/ie.js](https://dev.hcapemployers.gov.bc.ca/ie.js)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)
- **Cookie without SameSite Attribute** [10054] total: 5:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/ie.js](https://dev.hcapemployers.gov.bc.ca/ie.js)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)
- **Cross-Origin-Embedder-Policy Header Missing or Invalid** [90004] total: 4:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)
- **Permissions Policy Header Not Set** [10063] total: 5:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/ie.js](https://dev.hcapemployers.gov.bc.ca/ie.js)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)
- **Timestamp Disclosure - Unix** [10096] total: 5:
- [https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js](https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js)
- [https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js](https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js)
- [https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js](https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js)
- [https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js](https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js)
- [https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js](https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js)
- **Cookie Slack Detector** [90027] total: 5:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/favicon.ico](https://dev.hcapemployers.gov.bc.ca/favicon.ico)
- [https://dev.hcapemployers.gov.bc.ca/ie.js](https://dev.hcapemployers.gov.bc.ca/ie.js)
- [https://dev.hcapemployers.gov.bc.ca/snowplow-tracker.js](https://dev.hcapemployers.gov.bc.ca/snowplow-tracker.js)
- **Modern Web Application** [10109] total: 4:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 5:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/ie.js](https://dev.hcapemployers.gov.bc.ca/ie.js)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)
- **Re-examine Cache-control Directives** [10015] total: 4:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)
- **User Agent Fuzzer** [10104] total: 5:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)

View the [following link](https://github.com/bcgov/hcap/actions/runs/24591129621) to download the report.
RunnerID:24591129621

---
[ZAP by Checkmarx](https://checkmarx.com/)

Start with the linked ZAP report and the deployed site at https://dev.hcapemployers.gov.bc.ca; no source file or test is identified in the issue. Review which reported alerts are actionable for the application, address the selected findings, and rerun the full ZAP scan to confirm they are resolved.

Written by the indexing model from the issue text.