ZAP Scan Baseline Report

- Site: [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **CSP: Failure to Define Directive with No Fallback** [10055] total: 2:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **CSP: Wildcard Directive** [10055] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: script-src unsafe-eval** [10055] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: style-src unsafe-inline** [10055] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Cookie with SameSite Attribute None** [10054] total: 1:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Private IP Disclosure** [2] total: 1:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js)
- **Timestamp Disclosure - Unix** [10096] total: 87:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 4:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.34145cd8.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.34145cd8.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e3976a6d.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e3976a6d.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.f0d3d48e.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.f0d3d48e.js)
- **Modern Web Application** [10109] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Re-examine Cache-control Directives** [10015] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Session Management Response Identified** [10112] total: 2:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- **Storable and Cacheable Content** [10049] total: 11:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.47a05305.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.47a05305.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e3976a6d.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e3976a6d.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/main.css](https://minespace-test.apps.silver.devops.gov.bc.ca/main.css)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/public/faviconMS.ico](https://minespace-test.apps.silver.devops.gov.bc.ca/public/faviconMS.ico)
- ..

View the [following link](https://github.com/bcgov/mds/actions/runs/19956804756) to download the report.
RunnerID:19956804756

---
[ZAP by Checkmarx](https://checkmarx.com/)

Start by downloading the ZAP report from the linked GitHub Actions run and review the listed alerts for the test site. The payload names no source files or tests, and it does not define which findings must be resolved or what completion looks like.

Written by the indexing model from the issue text.