ZAP Scan Baseline Report
- Dominant language
- Python
- Stars
- 65
- Forks
- 11
- Avg merge
- 21h 25m
- Merged PRs (30d)
- 70
Description
- Site: [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 2:
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- **Missing Anti-clickjacking Header** [10020] total: 1:
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca)
- **Sub Resource Integrity Attribute Missing** [90003] total: 1:
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca)
- **In Page Banner Information Leak** [10009] total: 2:
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 9:
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/config.js](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/config.js)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/images/bcid-apple-icon.svg](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/images/bcid-apple-icon.svg)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/images/bcid-apple-touch-icon.png](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/images/bcid-apple-touch-icon.png)
- ..
- **Permissions Policy Header Not Set** [10063] total: 5:
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/config.js](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/config.js)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Server Leaks Version Information via "Server" HTTP Response Header Field** [10036] total: 11:
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-CCVuKPcY.css](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-CCVuKPcY.css)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/config.js](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/config.js)
- ..
- **Timestamp Disclosure - Unix** [10096] total: 19:
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 9:
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js)
- ..
- **Modern Web Application** [10109] total: 1:
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca)
- **Re-examine Cache-control Directives** [10015] total: 2:
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json)
- **Storable and Cacheable Content** [10049] total: 11:
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-CCVuKPcY.css](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-CCVuKPcY.css)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/index-k9qP0JqQ.js)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json)
- [https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/config.js](https://wps-pr-4261-e1e498-dev.apps.silver.devops.gov.bc.ca/config.js)
- ..
View the [following link](https://github.com/bcgov/wps/actions/runs/13268314998) to download the report.
RunnerID:13268314998
---
[ZAP by Checkmarx](https://checkmarx.com/)
Contributor guide
Research direction
Start with the linked ZAP report and inspect the listed deployed URLs and their response headers. No source files or tests are named, so trace each alert into the application or deployment configuration; done means the findings are resolved or explicitly triaged and a new baseline scan confirms the result.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- fastapi, javascript, python, react, typescript
- Domain
- backend, frontend, security, web-dev
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 15/100