ZAP: Frontend

- Site: [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **CSP: Wildcard Directive** [10055] total: 4:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **CSP: script-src unsafe-eval** [10055] total: 4:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **CSP: style-src unsafe-inline** [10055] total: 4:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Proxy Disclosure** [40025] total: 11:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/axios-BI6HAyac.js](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/axios-BI6HAyac.js)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-CeBKo1PD.css](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-CeBKo1PD.css)
- ..
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/)
- **Deprecated Feature Policy Header Set** [10063] total: 8:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/axios-BI6HAyac.js](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/axios-BI6HAyac.js)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-pMuu8lcV.js](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-pMuu8lcV.js)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/mui-8gcr04a2.js](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/mui-8gcr04a2.js)
- ..
- **Timestamp Disclosure - Unix** [10096] total: 2:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/mui-8gcr04a2.js](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/mui-8gcr04a2.js)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/react-Df3I0BRH.js](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/react-Df3I0BRH.js)
- **Base64 Disclosure** [10094] total: 2:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-CeBKo1PD.css](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-CeBKo1PD.css)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/mui-8gcr04a2.js](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/mui-8gcr04a2.js)
- **Cookie Slack Detector** [90027] total: 11:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/axios-BI6HAyac.js](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/axios-BI6HAyac.js)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-CeBKo1PD.css](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-CeBKo1PD.css)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 13:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/axios-BI6HAyac.js](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/axios-BI6HAyac.js)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/axios-BI6HAyac.js](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/axios-BI6HAyac.js)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-pMuu8lcV.js](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-pMuu8lcV.js)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-pMuu8lcV.js](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-pMuu8lcV.js)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-pMuu8lcV.js](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-pMuu8lcV.js)
- ..
- **Modern Web Application** [10109] total: 4:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 10:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/axios-BI6HAyac.js](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/axios-BI6HAyac.js)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-CeBKo1PD.css](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-CeBKo1PD.css)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-pMuu8lcV.js](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-pMuu8lcV.js)
- ..
- **Sec-Fetch-Dest Header is Missing** [90005] total: 4:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/favicon.ico](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/favicon.ico)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Mode Header is Missing** [90005] total: 4:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/favicon.ico](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/favicon.ico)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Site Header is Missing** [90005] total: 4:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/favicon.ico](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/favicon.ico)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-User Header is Missing** [90005] total: 4:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/favicon.ico](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/favicon.ico)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Session Management Response Identified** [10112] total: 2:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/)
- **Vulnerable JS Library** [10003] total: 1:
- [https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/react-Df3I0BRH.js](https://qs1-test-frontend.apps.silver.devops.gov.bc.ca/assets/react-Df3I0BRH.js)

View the [following link](https://github.com/bcgov/qs1/actions/runs/12444631595) to download the report.
RunnerID:12444631595

---
[ZAP by Checkmarx](https://checkmarx.com/)

Download the ZAP report from the linked GitHub Actions run and review the findings against the deployed frontend URL and listed assets, including react-Df3I0BRH.js. No source file or test is named, so first locate the code and configuration producing these responses. Done means the relevant findings are addressed and the ZAP scan is rerun with its results reviewed.

Written by the indexing model from the issue text.