ZAP: backend

- Site: [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 4:
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/robots.txt](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Permissions Policy Header Not Set** [10063] total: 4:
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/robots.txt](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Strict-Transport-Security Header Not Set** [10035] total: 4:
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/robots.txt](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 4:
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/robots.txt](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Dest Header is Missing** [90005] total: 4:
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/robots.txt](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Mode Header is Missing** [90005] total: 4:
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/robots.txt](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Site Header is Missing** [90005] total: 4:
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/robots.txt](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-User Header is Missing** [90005] total: 4:
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/robots.txt](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://qsos-leaflet-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml)

View the [following link](https://github.com/bcgov/qsos-leaflet/actions/runs/15507208241) to download the report.
RunnerID:15507208241

---
ZAP is supported by the [Crash Override Open Source Fellowship](https://crashoverride.com/?zap=act)

Begin with the linked ZAP report and inspect the backend deployment or configuration serving the listed URL. Determine how the reported response headers should be handled, then rerun the ZAP check and confirm the listed findings are resolved.

Written by the indexing model from the issue text.