ZAP Scan Baseline Report

- Site: [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 2:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Cookie with SameSite Attribute None** [10054] total: 1:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- **Dangerous JS Functions** [10110] total: 1:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js)
- **Permissions Policy Header Not Set** [10063] total: 5:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/config/features.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/config/features.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/tracker.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/tracker.js)
- **Strict-Transport-Security Header Not Set** [10035] total: 10:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico](https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png](https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json](https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- ..
- **Timestamp Disclosure - Unix** [10096] total: 20:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js)
- ..
- **X-Content-Type-Options Header Missing** [10021] total: 10:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico](https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png](https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json](https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 1:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js)
- **Modern Web Application** [10109] total: 2:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 1:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- **Re-examine Cache-control Directives** [10015] total: 4:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json](https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Session Management Response Identified** [10112] total: 2:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6f4d3202.js)
- **Storable and Cacheable Content** [10049] total: 9:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico](https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png](https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json](https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- ..

View the [following link](https://github.com/bcgov/itvr/actions/runs/8347407303) to download the report.
RunnerID:8347407303

Start with the linked ZAP baseline report and compare its findings across the deployed site, static/js/main.6f4d3202.js, sitemap.xml, and other listed assets. Trace where the reported response headers and exposed JavaScript content are configured, then rerun the ZAP scan to confirm the reported alerts are addressed.

Written by the indexing model from the issue text.