ZAP Scan Baseline Report

- Site: [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **CSP: Failure to Define Directive with No Fallback** [10055] total: 2:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **CSP: Wildcard Directive** [10055] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: script-src unsafe-eval** [10055] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: style-src unsafe-inline** [10055] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Cookie with SameSite Attribute None** [10054] total: 1:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Private IP Disclosure** [2] total: 1:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- **Timestamp Disclosure - Unix** [10096] total: 88:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 4:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.29d8fa8f.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.29d8fa8f.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e3976a6d.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e3976a6d.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.f13edb59.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.f13edb59.js)
- **Modern Web Application** [10109] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Re-examine Cache-control Directives** [10015] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Session Management Response Identified** [10112] total: 2:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- **Storable and Cacheable Content** [10049] total: 11:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e3976a6d.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e3976a6d.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e72ba902.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e72ba902.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/main.css](https://minespace-test.apps.silver.devops.gov.bc.ca/main.css)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/public/faviconMS.ico](https://minespace-test.apps.silver.devops.gov.bc.ca/public/faviconMS.ico)
- ..

View the [following link](https://github.com/bcgov/mds/actions/runs/16817011159) to download the report.
RunnerID:16817011159

Download the ZAP report from the linked GitHub Actions run and group the CSP, cookie, isolation, disclosure, and caching alerts by owning configuration or asset. Trace the affected deployed URLs and JavaScript bundles, including bundle.58e217d3.js and bundle.29d8fa8f.js, back to repository entry points; done means the findings are addressed or explicitly triaged and a follow-up scan shows the resulting status.

Written by the indexing model from the issue text.