ZAP Scan Baseline Report

Nobody has claimed this yet.

- Site: [https://www.zaproxy.org](https://www.zaproxy.org)
**New Alerts**
- **PII Disclosure** [10062] total: 1:
- [https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/](https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/)
- **Application Error Disclosure** [90022] total: 6:
- [https://www.zaproxy.org/docs/desktop/addons/graphql-support/options/](https://www.zaproxy.org/docs/desktop/addons/graphql-support/options/)
- [https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/](https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/)
- [https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/](https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/)
- [https://www.zaproxy.org/docs/desktop/start/features/custompages/](https://www.zaproxy.org/docs/desktop/start/features/custompages/)
- [https://www.zaproxy.org/docs/desktop/ui/dialogs/session/contexts/](https://www.zaproxy.org/docs/desktop/ui/dialogs/session/contexts/)
- ..
- **Content Security Policy (CSP) Header Not Set** [10038] total: 11:
- [https://www.zaproxy.org](https://www.zaproxy.org)
- [https://www.zaproxy.org/](https://www.zaproxy.org/)
- [https://www.zaproxy.org/blog/](https://www.zaproxy.org/blog/)
- [https://www.zaproxy.org/community/](https://www.zaproxy.org/community/)
- [https://www.zaproxy.org/docs/](https://www.zaproxy.org/docs/)
- ..
- **Cross-Domain Misconfiguration** [10098] total: 12:
- [https://www.zaproxy.org/blog/2021-12-14-log4shell-detection-with-zap/images/log4shell-zap_huaf5835b4bb85db2c5abb87d88fe28576_142518_300x300_fill_box_smart1_3.png](https://www.zaproxy.org/blog/2021-12-14-log4shell-detection-with-zap/images/log4shell-zap_huaf5835b4bb85db2c5abb87d88fe28576_142518_300x300_fill_box_smart1_3.png)
- [https://www.zaproxy.org/blog/index.xml](https://www.zaproxy.org/blog/index.xml)
- [https://www.zaproxy.org/img/favicon.ico](https://www.zaproxy.org/img/favicon.ico)
- [https://www.zaproxy.org/img/search.svg](https://www.zaproxy.org/img/search.svg)
- [https://www.zaproxy.org/img/zapcon/08%20March%202022.svg](https://www.zaproxy.org/img/zapcon/08%20March%202022.svg)
- ..
- **Source Code Disclosure - SQL** [10099] total: 8:
- [https://www.zaproxy.org/docs/api/](https://www.zaproxy.org/docs/api/)
- [https://www.zaproxy.org/docs/desktop/addons/ajax-spider/scandialog/](https://www.zaproxy.org/docs/desktop/addons/ajax-spider/scandialog/)
- [https://www.zaproxy.org/docs/desktop/addons/quick-start/](https://www.zaproxy.org/docs/desktop/addons/quick-start/)
- [https://www.zaproxy.org/docs/desktop/addons/report-generation/](https://www.zaproxy.org/docs/desktop/addons/report-generation/)
- [https://www.zaproxy.org/docs/desktop/addons/retest/](https://www.zaproxy.org/docs/desktop/addons/retest/)
- ..
- **Sub Resource Integrity Attribute Missing** [90003] total: 8:
- [https://www.zaproxy.org](https://www.zaproxy.org)
- [https://www.zaproxy.org](https://www.zaproxy.org)
- [https://www.zaproxy.org](https://www.zaproxy.org)
- [https://www.zaproxy.org](https://www.zaproxy.org)
- [https://www.zaproxy.org/robots.txt](https://www.zaproxy.org/robots.txt)
- ..
- **Absence of Anti-CSRF Tokens** [10202] total: 11:
- [https://www.zaproxy.org](https://www.zaproxy.org)
- [https://www.zaproxy.org/](https://www.zaproxy.org/)
- [https://www.zaproxy.org/blog/](https://www.zaproxy.org/blog/)
- [https://www.zaproxy.org/community/](https://www.zaproxy.org/community/)
- [https://www.zaproxy.org/docs/](https://www.zaproxy.org/docs/)
- ..
- **Cross-Domain JavaScript Source File Inclusion** [10017] total: 10:
- [https://www.zaproxy.org](https://www.zaproxy.org)
- [https://www.zaproxy.org](https://www.zaproxy.org)
- [https://www.zaproxy.org/](https://www.zaproxy.org/)
- [https://www.zaproxy.org/](https://www.zaproxy.org/)
- [https://www.zaproxy.org/blog/](https://www.zaproxy.org/blog/)
- ..
- **Dangerous JS Functions** [10110] total: 1:
- [https://www.zaproxy.org/main.08cf90.js](https://www.zaproxy.org/main.08cf90.js)
- **Information Disclosure - Debug Error Messages** [10023] total: 4:
- [https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/](https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/)
- [https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/](https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/)
- [https://www.zaproxy.org/docs/desktop/start/features/custompages/](https://www.zaproxy.org/docs/desktop/start/features/custompages/)
- [https://www.zaproxy.org/docs/desktop/ui/dialogs/session/contexts/](https://www.zaproxy.org/docs/desktop/ui/dialogs/session/contexts/)
- **Permissions Policy Header Not Set** [10063] total: 11:
- [https://www.zaproxy.org](https://www.zaproxy.org)
- [https://www.zaproxy.org/](https://www.zaproxy.org/)
- [https://www.zaproxy.org/blog/](https://www.zaproxy.org/blog/)
- [https://www.zaproxy.org/community/](https://www.zaproxy.org/community/)
- [https://www.zaproxy.org/docs/](https://www.zaproxy.org/docs/)
- ..
- **Private IP Disclosure** [2] total: 5:
- [https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/](https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/)
- [https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/](https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/)
- [https://www.zaproxy.org/docs/desktop/ui/dialogs/options/localproxy/](https://www.zaproxy.org/docs/desktop/ui/dialogs/options/localproxy/)
- [https://www.zaproxy.org/docs/docker/about/](https://www.zaproxy.org/docs/docker/about/)
- [https://www.zaproxy.org/index.xml](https://www.zaproxy.org/index.xml)
- **Strict-Transport-Security Header Not Set** [10035] total: 12:
- [https://www.zaproxy.org/blog/2021-12-14-log4shell-detection-with-zap/images/log4shell-zap_huaf5835b4bb85db2c5abb87d88fe28576_142518_300x300_fill_box_smart1_3.png](https://www.zaproxy.org/blog/2021-12-14-log4shell-detection-with-zap/images/log4shell-zap_huaf5835b4bb85db2c5abb87d88fe28576_142518_300x300_fill_box_smart1_3.png)
- [https://www.zaproxy.org/blog/index.xml](https://www.zaproxy.org/blog/index.xml)
- [https://www.zaproxy.org/img/favicon.ico](https://www.zaproxy.org/img/favicon.ico)
- [https://www.zaproxy.org/img/search.svg](https://www.zaproxy.org/img/search.svg)
- [https://www.zaproxy.org/img/zapcon/08%20March%202022.svg](https://www.zaproxy.org/img/zapcon/08%20March%202022.svg)
- ..
- **Timestamp Disclosure - Unix** [10096] total: 5:
- [https://www.zaproxy.org](https://www.zaproxy.org)
- [https://www.zaproxy.org/](https://www.zaproxy.org/)
- [https://www.zaproxy.org/blog/](https://www.zaproxy.org/blog/)
- [https://www.zaproxy.org/robots.txt](https://www.zaproxy.org/robots.txt)
- [https://www.zaproxy.org/videos/](https://www.zaproxy.org/videos/)
- **X-Content-Type-Options Header Missing** [10021] total: 12:
- [https://www.zaproxy.org/blog/2021-12-14-log4shell-detection-with-zap/images/log4shell-zap_huaf5835b4bb85db2c5abb87d88fe28576_142518_300x300_fill_box_smart1_3.png](https://www.zaproxy.org/blog/2021-12-14-log4shell-detection-with-zap/images/log4shell-zap_huaf5835b4bb85db2c5abb87d88fe28576_142518_300x300_fill_box_smart1_3.png)
- [https://www.zaproxy.org/blog/index.xml](https://www.zaproxy.org/blog/index.xml)
- [https://www.zaproxy.org/img/favicon.ico](https://www.zaproxy.org/img/favicon.ico)
- [https://www.zaproxy.org/img/search.svg](https://www.zaproxy.org/img/search.svg)
- [https://www.zaproxy.org/img/zapcon/08%20March%202022.svg](https://www.zaproxy.org/img/zapcon/08%20March%202022.svg)
- ..
- **Base64 Disclosure** [10094] total: 12:
- [https://www.zaproxy.org](https://www.zaproxy.org)
- [https://www.zaproxy.org](https://www.zaproxy.org)
- [https://www.zaproxy.org/](https://www.zaproxy.org/)
- [https://www.zaproxy.org/blog/](https://www.zaproxy.org/blog/)
- [https://www.zaproxy.org/community/](https://www.zaproxy.org/community/)
- ..
- **Content-Type Header Missing** [10019] total: 2:
- [https://www.zaproxy.org/blog/2020-08-28-introducing-the-graphql-add-on-for-zap/](https://www.zaproxy.org/blog/2020-08-28-introducing-the-graphql-add-on-for-zap/)
- [https://www.zaproxy.org/tags/graphql/index.xml](https://www.zaproxy.org/tags/graphql/index.xml)
- **Information Disclosure - Suspicious Comments** [10027] total: 3:
- [https://www.zaproxy.org/faq/](https://www.zaproxy.org/faq/)
- [https://www.zaproxy.org/main.08cf90.js](https://www.zaproxy.org/main.08cf90.js)
- [https://www.zaproxy.org/search/?q=ZAP](https://www.zaproxy.org/search/?q=ZAP)
- **Modern Web Application** [10109] total: 11:
- [https://www.zaproxy.org](https://www.zaproxy.org)
- [https://www.zaproxy.org/](https://www.zaproxy.org/)
- [https://www.zaproxy.org/blog/](https://www.zaproxy.org/blog/)
- [https://www.zaproxy.org/community/](https://www.zaproxy.org/community/)
- [https://www.zaproxy.org/docs/](https://www.zaproxy.org/docs/)
- ..
- **Retrieved from Cache** [10050] total: 11:
- [https://www.zaproxy.org](https://www.zaproxy.org)
- [https://www.zaproxy.org/](https://www.zaproxy.org/)
- [https://www.zaproxy.org/blog/](https://www.zaproxy.org/blog/)
- [https://www.zaproxy.org/community/](https://www.zaproxy.org/community/)
- [https://www.zaproxy.org/docs/](https://www.zaproxy.org/docs/)
- ..
- **Storable and Cacheable Content** [10049] total: 11:
- [https://www.zaproxy.org](https://www.zaproxy.org)
- [https://www.zaproxy.org/](https://www.zaproxy.org/)
- [https://www.zaproxy.org/blog/](https://www.zaproxy.org/blog/)
- [https://www.zaproxy.org/community/](https://www.zaproxy.org/community/)
- [https://www.zaproxy.org/docs/](https://www.zaproxy.org/docs/)
- ..
- **User Controllable HTML Element Attribute (Potential XSS)** [10031] total: 8:
- [https://www.zaproxy.org/search/?q=ZAP](https://www.zaproxy.org/search/?q=ZAP)
- [https://www.zaproxy.org/search/?q=ZAP](https://www.zaproxy.org/search/?q=ZAP)
- [https://www.zaproxy.org/search/?q=ZAP](https://www.zaproxy.org/search/?q=ZAP)
- [https://www.zaproxy.org/search/?q=ZAP](https://www.zaproxy.org/search/?q=ZAP)
- [https://www.zaproxy.org/search/?q=ZAP](https://www.zaproxy.org/search/?q=ZAP)
- ..

**Ignored Alerts**
- **Incomplete or No Cache-control Header Set** [10015] total: 11:

View the [following link](https://github.com/iib0011/owasp-zap-flow/actions/runs/1811855047) to download the report.
RunnerID:1811855047

No source files, tests, or entry points are named. Start by downloading the ZAP report from the linked GitHub Actions run and review the listed alerts; the issue does not define which findings to address or what completion would look like.

Written by the indexing model from the issue text.