ZAP Full Scan Report

- Site: [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
**New Alerts**
- **Proxy Disclosure** [40025] total: 5:
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/favicon.ico](https://dev.hcapemployers.gov.bc.ca/favicon.ico)
- [https://dev.hcapemployers.gov.bc.ca/ie.js](https://dev.hcapemployers.gov.bc.ca/ie.js)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/snowplow-tracker.js](https://dev.hcapemployers.gov.bc.ca/snowplow-tracker.js)
- **Cookie No HttpOnly Flag** [10010] total: 5:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/favicon.ico](https://dev.hcapemployers.gov.bc.ca/favicon.ico)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)
- **Cookie Without Secure Flag** [10011] total: 5:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)
- [https://dev.hcapemployers.gov.bc.ca/snowplow-tracker.js](https://dev.hcapemployers.gov.bc.ca/snowplow-tracker.js)
- **Cookie without SameSite Attribute** [10054] total: 5:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/ie.js](https://dev.hcapemployers.gov.bc.ca/ie.js)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)
- **Cross-Origin-Embedder-Policy Header Missing or Invalid** [90004] total: 4:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)
- **Permissions Policy Header Not Set** [10063] total: 5:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/ie.js](https://dev.hcapemployers.gov.bc.ca/ie.js)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)
- **Timestamp Disclosure - Unix** [10096] total: 5:
- [https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js](https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js)
- [https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js](https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js)
- [https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js](https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js)
- [https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js](https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js)
- [https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js](https://dev.hcapemployers.gov.bc.ca/static/js/main.e2215cb6.js)
- **Cookie Slack Detector** [90027] total: 5:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/favicon.ico](https://dev.hcapemployers.gov.bc.ca/favicon.ico)
- [https://dev.hcapemployers.gov.bc.ca/ie.js](https://dev.hcapemployers.gov.bc.ca/ie.js)
- [https://dev.hcapemployers.gov.bc.ca/snowplow-tracker.js](https://dev.hcapemployers.gov.bc.ca/snowplow-tracker.js)
- **Modern Web Application** [10109] total: 4:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 5:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/favicon.ico](https://dev.hcapemployers.gov.bc.ca/favicon.ico)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)
- **Re-examine Cache-control Directives** [10015] total: 4:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)
- **User Agent Fuzzer** [10104] total: 5:
- [https://dev.hcapemployers.gov.bc.ca](https://dev.hcapemployers.gov.bc.ca)
- [https://dev.hcapemployers.gov.bc.ca/](https://dev.hcapemployers.gov.bc.ca/)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/robots.txt](https://dev.hcapemployers.gov.bc.ca/robots.txt)
- [https://dev.hcapemployers.gov.bc.ca/sitemap.xml](https://dev.hcapemployers.gov.bc.ca/sitemap.xml)

View the [following link](https://github.com/bcgov/hcap/actions/runs/33652395530) to download the report.
RunnerID:33652395530

---
[ZAP by Checkmarx](https://checkmarx.com/)

Start with the linked ZAP report and its listed responses for the dev.hcapemployers.gov.bc.ca URLs. Review each reported alert and identify the relevant application or deployment entry point; done means the findings are addressed or explicitly assessed and the ZAP scan no longer reports unresolved actionable issues.

Written by the indexing model from the issue text.