ZAP Full Scan Report

- Site: [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
**New Alerts**
- **CSP: script-src unsafe-eval** [10055] total: 4:
- [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
- [https://d309kopm8ags5f.cloudfront.net/](https://d309kopm8ags5f.cloudfront.net/)
- [https://d309kopm8ags5f.cloudfront.net/robots.txt](https://d309kopm8ags5f.cloudfront.net/robots.txt)
- [https://d309kopm8ags5f.cloudfront.net/sitemap.xml](https://d309kopm8ags5f.cloudfront.net/sitemap.xml)
- **CSP: style-src unsafe-inline** [10055] total: 4:
- [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
- [https://d309kopm8ags5f.cloudfront.net/](https://d309kopm8ags5f.cloudfront.net/)
- [https://d309kopm8ags5f.cloudfront.net/robots.txt](https://d309kopm8ags5f.cloudfront.net/robots.txt)
- [https://d309kopm8ags5f.cloudfront.net/sitemap.xml](https://d309kopm8ags5f.cloudfront.net/sitemap.xml)
- **Dangerous JS Functions** [10110] total: 1:
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-2f6d7a6b93eeb5a5.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-2f6d7a6b93eeb5a5.js)
- **Permissions Policy Header Not Set** [10063] total: 11:
- [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
- [https://d309kopm8ags5f.cloudfront.net/](https://d309kopm8ags5f.cloudfront.net/)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/main-2e6672c6e2059e40.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/main-2e6672c6e2059e40.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/index-b56ff464c274f176.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/index-b56ff464c274f176.js)
- ..
- **Timestamp Disclosure - Unix** [10096] total: 22:
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-2f6d7a6b93eeb5a5.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-2f6d7a6b93eeb5a5.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-2f6d7a6b93eeb5a5.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-2f6d7a6b93eeb5a5.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-2f6d7a6b93eeb5a5.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-2f6d7a6b93eeb5a5.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-2f6d7a6b93eeb5a5.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-2f6d7a6b93eeb5a5.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-2f6d7a6b93eeb5a5.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-2f6d7a6b93eeb5a5.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 9:
- [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
- [https://d309kopm8ags5f.cloudfront.net/](https://d309kopm8ags5f.cloudfront.net/)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/main-2e6672c6e2059e40.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/main-2e6672c6e2059e40.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-2f6d7a6b93eeb5a5.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/_app-2f6d7a6b93eeb5a5.js)
- ..
- **Modern Web Application** [10109] total: 4:
- [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
- [https://d309kopm8ags5f.cloudfront.net/](https://d309kopm8ags5f.cloudfront.net/)
- [https://d309kopm8ags5f.cloudfront.net/robots.txt](https://d309kopm8ags5f.cloudfront.net/robots.txt)
- [https://d309kopm8ags5f.cloudfront.net/sitemap.xml](https://d309kopm8ags5f.cloudfront.net/sitemap.xml)
- **Non-Storable Content** [10049] total: 11:
- [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
- [https://d309kopm8ags5f.cloudfront.net/](https://d309kopm8ags5f.cloudfront.net/)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/framework-0bff4c72fef67389.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/index-b56ff464c274f176.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/pages/index-b56ff464c274f176.js)
- [https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/polyfills-5cd94c89d3acac5f.js](https://d309kopm8ags5f.cloudfront.net/_next/static/chunks/polyfills-5cd94c89d3acac5f.js)
- ..
- **Re-examine Cache-control Directives** [10015] total: 4:
- [https://d309kopm8ags5f.cloudfront.net](https://d309kopm8ags5f.cloudfront.net)
- [https://d309kopm8ags5f.cloudfront.net/](https://d309kopm8ags5f.cloudfront.net/)
- [https://d309kopm8ags5f.cloudfront.net/robots.txt](https://d309kopm8ags5f.cloudfront.net/robots.txt)
- [https://d309kopm8ags5f.cloudfront.net/sitemap.xml](https://d309kopm8ags5f.cloudfront.net/sitemap.xml)

View the [following link](https://github.com/bcgov/internationally-educated-nurses/actions/runs/5861153860) to download the report.
RunnerID:5861153860

Start with the linked ZAP report and review the listed deployed URLs and _next/static JavaScript chunks, especially _app and the page bundles. Identify which reported alerts are actionable in the TypeScript/Next.js project, then rerun the ZAP scan; done means the relevant alerts are addressed or explicitly reviewed.

Written by the indexing model from the issue text.