ZAP Security Report

[github-actions]

• Site: https://wisr.apps.gold.devops.gov.bc.ca
  New Alerts
  • CSP: style-src unsafe-inline [10055] total: 2:
    • https://wisr.apps.gold.devops.gov.bc.ca/
    • https://wisr.apps.gold.devops.gov.bc.ca/
  • Proxy Disclosure [40025] total: 5:
    • https://wisr.apps.gold.devops.gov.bc.ca
    • https://wisr.apps.gold.devops.gov.bc.ca/
    • https://wisr.apps.gold.devops.gov.bc.ca/assets/index-CFXT9ybk.css
    • https://wisr.apps.gold.devops.gov.bc.ca/assets/index-eXvsmmfc.js
    • https://wisr.apps.gold.devops.gov.bc.ca/assets/map-DNZsrlR_.js
  • CSP: Notices [10055] total: 2:
    • https://wisr.apps.gold.devops.gov.bc.ca/
    • https://wisr.apps.gold.devops.gov.bc.ca/
  • Cross-Origin-Embedder-Policy Header Missing or Invalid [90004] total: 1:
    • https://wisr.apps.gold.devops.gov.bc.ca/
  • Permissions Policy Header Not Set [10063] total: 5:
    • https://wisr.apps.gold.devops.gov.bc.ca/
    • https://wisr.apps.gold.devops.gov.bc.ca/assets/forms-DxuQEnWY.js
    • https://wisr.apps.gold.devops.gov.bc.ca/assets/query-Drh28es3.js
    • https://wisr.apps.gold.devops.gov.bc.ca/assets/rolldown-runtime-CNC7AqOf.js
    • https://wisr.apps.gold.devops.gov.bc.ca/assets/ui-vendor-CiPvjIi1.js
  • Timestamp Disclosure - Unix [10096] total: 1:
    • https://wisr.apps.gold.devops.gov.bc.ca/assets/map-DNZsrlR_.js
  • CORS Header [40040] total: 5:
    • https://wisr.apps.gold.devops.gov.bc.ca
    • https://wisr.apps.gold.devops.gov.bc.ca/
    • https://wisr.apps.gold.devops.gov.bc.ca/assets
    • https://wisr.apps.gold.devops.gov.bc.ca/assets/forms-DxuQEnWY.js
    • https://wisr.apps.gold.devops.gov.bc.ca/assets/index-CFXT9ybk.css
  • Information Disclosure - Suspicious Comments [10027] total: 2:
    • https://wisr.apps.gold.devops.gov.bc.ca/assets/index-eXvsmmfc.js
    • https://wisr.apps.gold.devops.gov.bc.ca/assets/index-eXvsmmfc.js
  • Modern Web Application [10109] total: 2:
    • https://wisr.apps.gold.devops.gov.bc.ca/
    • https://wisr.apps.gold.devops.gov.bc.ca/
  • Re-examine Cache-control Directives [10015] total: 1:
    • https://wisr.apps.gold.devops.gov.bc.ca/
  • Storable and Cacheable Content [10049] total: 5:
    • https://wisr.apps.gold.devops.gov.bc.ca/
    • https://wisr.apps.gold.devops.gov.bc.ca/assets/rolldown-runtime-CNC7AqOf.js
    • https://wisr.apps.gold.devops.gov.bc.ca/favicon-32x32.png
    • https://wisr.apps.gold.devops.gov.bc.ca/robots.txt
    • https://wisr.apps.gold.devops.gov.bc.ca/sitemap.xml
  • User Agent Fuzzer [10104] total: 5:
    • https://wisr.apps.gold.devops.gov.bc.ca
    • https://wisr.apps.gold.devops.gov.bc.ca
    • https://wisr.apps.gold.devops.gov.bc.ca/
    • https://wisr.apps.gold.devops.gov.bc.ca/
    • https://wisr.apps.gold.devops.gov.bc.ca/

View the following link to download the report.
RunnerID:30697783255

---

ZAP by Checkmarx