ZAP Scan Baseline Report

- Site: [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **CSP: Failure to Define Directive with No Fallback** [10055] total: 2:
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **CSP: Wildcard Directive** [10055] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: script-src unsafe-eval** [10055] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: style-src unsafe-inline** [10055] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Sub Resource Integrity Attribute Missing** [90003] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt)
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Private IP Disclosure** [2] total: 1:
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- **Timestamp Disclosure - Unix** [10096] total: 88:
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 4:
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.1b4d.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.1b4d.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.778b.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.778b.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.aa48.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.aa48.js)
- **Modern Web Application** [10109] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Re-examine Cache-control Directives** [10015] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Session Management Response Identified** [10112] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt)
- **Storable and Cacheable Content** [10049] total: 11:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.778b.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.778b.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/main.css](https://mds-test.apps.silver.devops.gov.bc.ca/main.css)
- [https://mds-test.apps.silver.devops.gov.bc.ca/public/faviconCORE.ico](https://mds-test.apps.silver.devops.gov.bc.ca/public/faviconCORE.ico)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt)
- ..

View the [following link](https://github.com/bcgov/mds/actions/runs/16817116100) to download the report.
RunnerID:16817116100

Download the ZAP report from the linked GitHub Actions run and review the listed alerts and affected URLs, including the JavaScript bundles, robots.txt, sitemap.xml, and main.css. Trace each finding to its source or deployment configuration, then rerun the baseline scan; done means the reported findings have been addressed or explicitly reviewed.

Written by the indexing model from the issue text.