ZAP Full Scan Report

[github-actions]

• Site: http://localhost:3000
  New Alerts
  • CSP: script-src unsafe-inline [10055] total: 5:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/en/home
    • http://localhost:3000/notsupported.js
    • http://localhost:3000/sitemap.xml
  • CSP: style-src unsafe-inline [10055] total: 5:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/en/home
    • http://localhost:3000/notsupported.js
    • http://localhost:3000/sitemap.xml
  • Sub Resource Integrity Attribute Missing [90003] total: 12:
    • http://localhost:3000/en/projects/benefits-finder
    • http://localhost:3000/en/projects/digital-standards-playbook
    • http://localhost:3000/en/projects/making-easier-get-benefits
    • http://localhost:3000/en/projects/oas-benefits-estimator
    • http://localhost:3000/en/projects/transforming-ei-indigenous-peoples
    • ..
  • Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 10:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/_next/static/media/1755441e3a2fa970-s.p.woff2
    • http://localhost:3000/_next/static/media/4de1fea1a954a5b6-s.p.woff2
    • http://localhost:3000/favicon.ico
    • ..
  • Permissions Policy Header Not Set [10063] total: 12:
    • http://localhost:3000/_next/static/3yYM8BGNP3GQiKishmfYB/_buildManifest.js
    • http://localhost:3000/_next/static/3yYM8BGNP3GQiKishmfYB/_ssgManifest.js
    • http://localhost:3000/_next/static/chunks/156-e409d2f7b212e4fb.js
    • http://localhost:3000/_next/static/chunks/210-4222020f798ee1df.js
    • http://localhost:3000/_next/static/chunks/c16184b3-f17c4c88591198dc.js
    • ..
  • Timestamp Disclosure - Unix [10096] total: 2:
    • http://localhost:3000/_next/static/chunks/279-01aa43c6417d8b64.js
    • http://localhost:3000/_next/static/chunks/main-a306120f727bb798.js
  • Vulnerable JS Library [10003] total: 1:
    • http://localhost:3000/_next/static/chunks/main-a306120f727bb798.js
  • X-Content-Type-Options Header Missing [10021] total: 12:
    • http://localhost:3000/_next/static/3yYM8BGNP3GQiKishmfYB/_buildManifest.js
    • http://localhost:3000/_next/static/chunks/210-4222020f798ee1df.js
    • http://localhost:3000/_next/static/chunks/main-a306120f727bb798.js
    • http://localhost:3000/_next/static/chunks/pages/_app-246e29132b0ca187.js
    • http://localhost:3000/_next/static/chunks/polyfills-42372ed130431b0a.js
    • ..
  • Content-Type Header Missing [10019] total: 5:
    • http://localhost:3000/api
    • http://localhost:3000/projects
    • http://localhost:3000/projects/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/rsdc-demander
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-2b1f7a23d657eae4.js
    • http://localhost:3000/_next/static/chunks/main-a306120f727bb798.js
    • http://localhost:3000/_next/static/chunks/polyfills-42372ed130431b0a.js
    • ..
  • Modern Web Application [10109] total: 11:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/en/home
    • http://localhost:3000/en/rsdc-demander
    • http://localhost:3000/fr/accueil
    • ..
  • Non-Storable Content [10049] total: 5:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/api
    • http://localhost:3000/projects/
    • http://localhost:3000/rsdc-demander
  • Storable and Cacheable Content [10049] total: 5:
    • http://localhost:3000/_next/static/media/155cae559bbd1a77-s.p.woff2
    • http://localhost:3000/_next/static/media/1755441e3a2fa970-s.p.woff2
    • http://localhost:3000/_next/static/media/4de1fea1a954a5b6-s.p.woff2
    • http://localhost:3000/_next/static/media/6d664cce900333ee-s.p.woff2
    • http://localhost:3000/robots.txt
  • Storable but Non-Cacheable Content [10049] total: 1:
    • http://localhost:3000/favicon.ico
  • User Agent Fuzzer [10104] total: 94:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/_next
    • http://localhost:3000/api
    • http://localhost:3000/en
    • ..

View the following link to download the report.
RunnerID:17737315854

---

ZAP by Checkmarx

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts
  • Vulnerable JS Library [10003] total: 1:

View the following link to download the report.
RunnerID:17947458402