bcgov / bcgov/tryquickstart

ZAP Security Report: backend

Open
#6 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
0
Forks
0
PR merge metrics
No merged PRs in 30d

Description

- Site: [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **CORS Misconfiguration** [40040] total: 1:
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/api](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/api)
- **CSP: style-src unsafe-inline** [10055] total: 4:
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/api](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/api)
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Cross-Domain Misconfiguration** [10098] total: 1:
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/api](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/api)
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 4:
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/api](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/api)
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Information Disclosure - Suspicious Comments** [10027] total: 1:
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-B669E8kN.js](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-B669E8kN.js)
- **Modern Web Application** [10109] total: 3:
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 8:
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/api](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/api)
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-B669E8kN.js](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-B669E8kN.js)
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-QVRv6kAa.css](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-QVRv6kAa.css)
- [https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/assets/react-DbHEDQBy.js](https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/assets/react-DbHEDQBy.js)
- ..

View the [following link](https://github.com/bcgov/tryquickstart/actions/runs/15651388763) to download the report.
RunnerID:15651388763

---
[ZAP by Checkmarx](https://checkmarx.com/)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.