ZAP Scan Baseline Report

- Site: [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 2:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Cookie with SameSite Attribute None** [10054] total: 1:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- **Dangerous JS Functions** [10110] total: 1:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.a7fdfcbf.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.a7fdfcbf.js)
- **Permissions Policy Header Not Set** [10063] total: 5:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/config/features.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/config/features.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.a7fdfcbf.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.a7fdfcbf.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/tracker.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/tracker.js)
- **Strict-Transport-Security Header Not Set** [10035] total: 10:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico](https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png](https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json](https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- ..
- **Timestamp Disclosure - Unix** [10096] total: 19:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.a7fdfcbf.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.a7fdfcbf.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.a7fdfcbf.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.a7fdfcbf.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.a7fdfcbf.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.a7fdfcbf.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.a7fdfcbf.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.a7fdfcbf.js)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.a7fdfcbf.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.a7fdfcbf.js)
- ..
- **X-Content-Type-Options Header Missing** [10021] total: 10:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico](https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png](https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json](https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 1:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.a7fdfcbf.js](https://itvr-dev.apps.silver.devops.gov.bc.ca/static/js/main.a7fdfcbf.js)
- **Modern Web Application** [10109] total: 2:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 1:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- **Re-examine Cache-control Directives** [10015] total: 4:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json](https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Session Management Response Identified** [10112] total: 2:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca](https://itvr-dev.apps.silver.devops.gov.bc.ca)
- **Storable and Cacheable Content** [10049] total: 9:
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico](https://itvr-dev.apps.silver.devops.gov.bc.ca/favicon.ico)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png](https://itvr-dev.apps.silver.devops.gov.bc.ca/logo192.png)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json](https://itvr-dev.apps.silver.devops.gov.bc.ca/manifest.json)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- ..

View the [following link](https://github.com/bcgov/itvr/actions/runs/11149196610) to download the report.
RunnerID:11149196610

Start with the linked ZAP report and compare its findings with the listed site, sitemap.xml, static JavaScript, and other resource URLs. Identify which reported alerts are actionable, then rerun the ZAP scan against the site; done means the actionable findings have been addressed or documented with justification.

Written by the indexing model from the issue text.