ZAP Scan Baseline Report

- Site: [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 2:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Cookie with SameSite Attribute None** [10054] total: 1:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- **Dangerous JS Functions** [10110] total: 1:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js)
- **Permissions Policy Header Not Set** [10063] total: 5:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/config/features.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/config/features.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/tracker.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/tracker.js)
- **Strict-Transport-Security Header Not Set** [10035] total: 10:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico](https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png](https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json](https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- ..
- **Timestamp Disclosure - Unix** [10096] total: 19:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js)
- ..
- **X-Content-Type-Options Header Missing** [10021] total: 10:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico](https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png](https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json](https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 1:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js)
- **Modern Web Application** [10109] total: 2:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 1:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- **Re-examine Cache-control Directives** [10015] total: 4:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json](https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Session Management Response Identified** [10112] total: 2:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.6890e49e.js)
- **Storable and Cacheable Content** [10049] total: 9:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico](https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png](https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json](https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- ..

View the [following link](https://github.com/bcgov/itvr/actions/runs/8710557907) to download the report.
RunnerID:8710557907

Download the ZAP report from the linked GitHub Actions run and review each listed alert against the deployed application and its response configuration. Identify the relevant project entry points, address the confirmed findings, and rerun the baseline scan to verify that the reported alerts are resolved.

Written by the indexing model from the issue text.