ZAP: frontend

- Site: [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 4:
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Permissions Policy Header Not Set** [10063] total: 4:
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Strict-Transport-Security Header Not Set** [10035] total: 4:
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 4:
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Dest Header is Missing** [90005] total: 4:
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Mode Header is Missing** [90005] total: 4:
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Site Header is Missing** [90005] total: 4:
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-User Header is Missing** [90005] total: 4:
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qsos-leaflet-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)

View the [following link](https://github.com/bcgov/qsos-leaflet/actions/runs/33249543675) to download the report.
RunnerID:33249543675

---
ZAP is supported by the [Crash Override Open Source Fellowship](https://crashoverride.com/?zap=act)

Open the linked ZAP report from GitHub Actions run 33249543675 and compare its findings with the deployed frontend responses at the listed URLs. Identify where response headers are configured, then verify that the reported CSP, Permissions-Policy, Strict-Transport-Security, cache, and Sec-Fetch findings are resolved for the frontend routes.

Written by the indexing model from the issue text.