ZAP Scan Baseline Report

- Site: [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **CSP: Failure to Define Directive with No Fallback** [10055] total: 2:
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **CSP: Wildcard Directive** [10055] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: script-src unsafe-eval** [10055] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: style-src unsafe-inline** [10055] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Sub Resource Integrity Attribute Missing** [90003] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Vulnerable JS Library** [10003] total: 1:
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.b6a1.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.b6a1.js)
- **Cookie with SameSite Attribute None** [10054] total: 1:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- **Cross-Origin-Embedder-Policy Header Missing or Invalid** [90004] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Private IP Disclosure** [2] total: 1:
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.20df.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.20df.js)
- **Timestamp Disclosure - Unix** [10096] total: 5:
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.20df.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.20df.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.20df.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.20df.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.20df.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.20df.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.20df.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.20df.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.20df.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.20df.js)
- **Information Disclosure - Suspicious Comments** [10027] total: 1:
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.b6a1.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.b6a1.js)
- **Modern Web Application** [10109] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Re-examine Cache-control Directives** [10015] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Session Management Response Identified** [10112] total: 1:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- **Storable and Cacheable Content** [10049] total: 5:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/main.css](https://mds-test.apps.silver.devops.gov.bc.ca/main.css)
- [https://mds-test.apps.silver.devops.gov.bc.ca/public/faviconCORE.ico](https://mds-test.apps.silver.devops.gov.bc.ca/public/faviconCORE.ico)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml)

View the [following link](https://github.com/bcgov/mds/actions/runs/34577058682) to download the report.
RunnerID:34577058682

---
[ZAP by Checkmarx](https://checkmarx.com/)

Download the linked ZAP report, then inspect the listed JavaScript bundles, main.css, robots.txt, and sitemap.xml responses to map each alert to its source. Done means the reported findings have been reviewed and the baseline scan can be rerun with the issues resolved or explicitly accounted for.

Written by the indexing model from the issue text.