bcgov / bcgov/internationally-educated-nurses
ZAP Full Scan Report
- Dominant language
- TypeScript
- Stars
- 2
- Forks
- 1
- PR merge metrics
- No merged PRs in 30d
Description
- Site: [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
**New Alerts**
- **CSP: style-src unsafe-inline** [10055] total: 4:
- [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
- [https://d309kopm8ags5f.cloudfront.net/](https://d309kopm8ags5f.cloudfront.net/)
- [https://d309kopm8ags5f.cloudfront.net/robots.txt](https://d309kopm8ags5f.cloudfront.net/robots.txt)
- [https://d309kopm8ags5f.cloudfront.net/sitemap.xml](https://d309kopm8ags5f.cloudfront.net/sitemap.xml)
- **Timestamp Disclosure - Unix** [10096] total: 13:
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 9:
- [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
- [https://d309kopm8ags5f.cloudfront.net/](https://d309kopm8ags5f.cloudfront.net/)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/main-2e6672c6e2059e40.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/main-2e6672c6e2059e40.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-3deb653c0bf327e2.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-3deb653c0bf327e2.js)
- ..
- **Modern Web Application** [10109] total: 6:
- [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
- [https://d309kopm8ags5f.cloudfront.net/](https://d309kopm8ags5f.cloudfront.net/)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/polyfills-5cd94c89d3acac5f.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/polyfills-5cd94c89d3acac5f.js)
- [https://d309kopm8ags5f.cloudfront.net/robots.txt](https://d309kopm8ags5f.cloudfront.net/robots.txt)
- ..
- **Re-examine Cache-control Directives** [10015] total: 4:
- [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
- [https://d309kopm8ags5f.cloudfront.net/](https://d309kopm8ags5f.cloudfront.net/)
- [https://d309kopm8ags5f.cloudfront.net/robots.txt](https://d309kopm8ags5f.cloudfront.net/robots.txt)
- [https://d309kopm8ags5f.cloudfront.net/sitemap.xml](https://d309kopm8ags5f.cloudfront.net/sitemap.xml)
View the [following link](https://github.com/bcgov/internationally-educated-nurses/actions/runs/2920560424) to download the report.
RunnerID:2920560424
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the linked GitHub Actions run and download the ZAP report, then inspect the deployed site and listed Next.js assets for each alert. Done should be defined by a follow-up scan documenting how the CSP, timestamp, suspicious-comment, modern-application, and cache-control findings were handled.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- next.js, typescript
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100