bcgov / bcgov/internationally-educated-nurses

ZAP Full Scan Report

Open
#331 4 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
2
Forks
1
PR merge metrics
No merged PRs in 30d

Description

- Site: [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
**New Alerts**
- **CSP: style-src unsafe-inline** [10055] total: 4:
- [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
- [https://d309kopm8ags5f.cloudfront.net/](https://d309kopm8ags5f.cloudfront.net/)
- [https://d309kopm8ags5f.cloudfront.net/robots.txt](https://d309kopm8ags5f.cloudfront.net/robots.txt)
- [https://d309kopm8ags5f.cloudfront.net/sitemap.xml](https://d309kopm8ags5f.cloudfront.net/sitemap.xml)
- **Timestamp Disclosure - Unix** [10096] total: 13:
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 9:
- [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
- [https://d309kopm8ags5f.cloudfront.net/](https://d309kopm8ags5f.cloudfront.net/)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/main-2e6672c6e2059e40.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/main-2e6672c6e2059e40.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-3deb653c0bf327e2.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-3deb653c0bf327e2.js)
- ..
- **Modern Web Application** [10109] total: 6:
- [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
- [https://d309kopm8ags5f.cloudfront.net/](https://d309kopm8ags5f.cloudfront.net/)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/polyfills-5cd94c89d3acac5f.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/polyfills-5cd94c89d3acac5f.js)
- [https://d309kopm8ags5f.cloudfront.net/robots.txt](https://d309kopm8ags5f.cloudfront.net/robots.txt)
- ..
- **Re-examine Cache-control Directives** [10015] total: 4:
- [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
- [https://d309kopm8ags5f.cloudfront.net/](https://d309kopm8ags5f.cloudfront.net/)
- [https://d309kopm8ags5f.cloudfront.net/robots.txt](https://d309kopm8ags5f.cloudfront.net/robots.txt)
- [https://d309kopm8ags5f.cloudfront.net/sitemap.xml](https://d309kopm8ags5f.cloudfront.net/sitemap.xml)

View the [following link](https://github.com/bcgov/internationally-educated-nurses/actions/runs/2920560424) to download the report.
RunnerID:2920560424

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the linked GitHub Actions run and download the ZAP report, then inspect the deployed site and listed Next.js assets for each alert. Done should be defined by a follow-up scan documenting how the CSP, timestamp, suspicious-comment, modern-application, and cache-control findings were handled.

Written by the indexing model from the issue text.

Assessment

Tech stack
next.js, typescript
Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.