ZAP test Backend Baseline Scan Report
- Dominant language
- Python
- Stars
- 2
- Forks
- 9
- PR merge metrics
- No merged PRs in 30d
Description
- Site: [https://itvr-backend-test.apps.silver.devops.gov.bc.ca](https://itvr-backend-test.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 4:
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca](https://itvr-backend-test.apps.silver.devops.gov.bc.ca)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Proxy Disclosure** [40025] total: 4:
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca](https://itvr-backend-test.apps.silver.devops.gov.bc.ca)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca](https://itvr-backend-test.apps.silver.devops.gov.bc.ca)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/)
- **Permissions Policy Header Not Set** [10063] total: 4:
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca](https://itvr-backend-test.apps.silver.devops.gov.bc.ca)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Strict-Transport-Security Header Not Set** [10035] total: 4:
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca](https://itvr-backend-test.apps.silver.devops.gov.bc.ca)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Cookie Slack Detector** [90027] total: 4:
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca](https://itvr-backend-test.apps.silver.devops.gov.bc.ca)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 2:
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca](https://itvr-backend-test.apps.silver.devops.gov.bc.ca)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/)
- **Session Management Response Identified** [10112] total: 3:
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca](https://itvr-backend-test.apps.silver.devops.gov.bc.ca)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca](https://itvr-backend-test.apps.silver.devops.gov.bc.ca)
- **Storable and Cacheable Content** [10049] total: 3:
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://itvr-backend-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-backend-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
View the [following link](https://github.com/bcgov/itvr/actions/runs/7576358667) to download the report.
RunnerID:7576358667
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the linked ZAP baseline scan report and review the listed alerts against the backend test site responses. Determine which findings require changes and rerun the baseline scan after addressing them; done means the applicable alerts are resolved or explicitly accepted.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- django, python
- Domain
- backend, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100