ZAP Full Scan Report

[github-actions]

• Site: http://localhost:3000
  New Alerts
  • CSP: Notices [10055] total: 1:
    • http://localhost:3000/
  • Dangerous JS Functions [10110] total: 1:
    • http://localhost:3000/assets/application-c839821ec8415ae5f1478c8fd0bdbcd9c390474cfbe82287ff00daebb5ee81c7.js
  • Permissions Policy Header Not Set [10063] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/assets/application-c839821ec8415ae5f1478c8fd0bdbcd9c390474cfbe82287ff00daebb5ee81c7.js
    • http://localhost:3000/cbv/agreement
    • http://localhost:3000/cbv/entry
  • Information Disclosure - Suspicious Comments [10027] total: 5:
    • http://localhost:3000/assets/application-c839821ec8415ae5f1478c8fd0bdbcd9c390474cfbe82287ff00daebb5ee81c7.js
    • http://localhost:3000/assets/application-c839821ec8415ae5f1478c8fd0bdbcd9c390474cfbe82287ff00daebb5ee81c7.js
    • http://localhost:3000/assets/application-c839821ec8415ae5f1478c8fd0bdbcd9c390474cfbe82287ff00daebb5ee81c7.js
    • http://localhost:3000/assets/application-c839821ec8415ae5f1478c8fd0bdbcd9c390474cfbe82287ff00daebb5ee81c7.js
    • http://localhost:3000/assets/application-c839821ec8415ae5f1478c8fd0bdbcd9c390474cfbe82287ff00daebb5ee81c7.js
  • Loosely Scoped Cookie [90033] total: 5:
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/cbv/agreement
    • http://localhost:3000/cbv/entry
    • http://localhost:3000/cbv/agreement
  • Non-Storable Content [10049] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/cbv/agreement
    • http://localhost:3000/cbv/entry
    • http://localhost:3000/cbv/agreement
  • Session Management Response Identified [10112] total: 7:
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/cbv/agreement
    • http://localhost:3000/cbv/entry
    • http://localhost:3000/cbv/agreement
    • ..
  • Storable and Cacheable Content [10049] total: 6:
    • http://localhost:3000/assets/@uswds/uswds/dist/img/usa-icons/close-ffbc61caf4be69eb734a7f3e93e96a4e2e3a163291b4ac04fc7c942dff396d27.svg
    • http://localhost:3000/assets/@uswds/uswds/dist/img/usa-icons/lock-20b761954d9d0bdb4913c9546b9b5bad32bc89ac48b8439b748e04d5fd10379e.svg
    • http://localhost:3000/assets/application-4f0b521e4792af4e12fcc0ab94f3da2d97c81323d8faa4c64b460139296b356a.css
    • http://localhost:3000/assets/application-c839821ec8415ae5f1478c8fd0bdbcd9c390474cfbe82287ff00daebb5ee81c7.js
    • http://localhost:3000/robots.txt
    • ..
  • User Agent Fuzzer [10104] total: 60:
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • ..

View the following link to download the report.
RunnerID:10427082597

---

ZAP is supported by the Crash Override Open Source Fellowship

[github-actions]

• Site: http://localhost:3000
  New Alerts
  • Hidden File Found [40035] total: 1:
    • http://localhost:3000/BitKeeper

View the following link to download the report.
RunnerID:10458455452

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts
  • Hidden File Found [40035] total: 1:

View the following link to download the report.
RunnerID:10458737304

[github-actions]

• Site: http://localhost:3000
  New Alerts
  • Hidden File Found [40035] total: 1:
    • http://localhost:3000/BitKeeper

View the following link to download the report.
RunnerID:10458770710

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts
  • Hidden File Found [40035] total: 1:

View the following link to download the report.
RunnerID:10459111332

[github-actions]

• Site: http://localhost:3000
  New Alerts
  • Hidden File Found [40035] total: 1:
    • http://localhost:3000/BitKeeper

View the following link to download the report.
RunnerID:10459527852

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts
  • Hidden File Found [40035] total: 1:

View the following link to download the report.
RunnerID:10459654610

[github-actions]

• Site: http://localhost:3000
  New Alerts
  • Hidden File Found [40035] total: 1:
    • http://localhost:3000/BitKeeper

View the following link to download the report.
RunnerID:10459527852

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts
  • Hidden File Found [40035] total: 1:

View the following link to download the report.
RunnerID:10460079140

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • Content Security Policy (CSP) Header Not Set [10038] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml

  Resolved Alerts

  • CSP: Notices [10055] total: 1:
  • Dangerous JS Functions [10110] total: 1:
  • Information Disclosure - Suspicious Comments [10027] total: 5:
  • Loosely Scoped Cookie [90033] total: 5:
  • Session Management Response Identified [10112] total: 8:
  • User Agent Fuzzer [10104] total: 60:

View the following link to download the report.
RunnerID:10530919149

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • CSP: Notices [10055] total: 1:
    • http://localhost:3000/
  • Dangerous JS Functions [10110] total: 1:
    • http://localhost:3000/assets/application-61c5e2b1b1952cf74ff1b12d450be24230a291f0f7b058011d3ee4fee32ec8e2.js
  • Information Disclosure - Suspicious Comments [10027] total: 5:
    • http://localhost:3000/assets/application-61c5e2b1b1952cf74ff1b12d450be24230a291f0f7b058011d3ee4fee32ec8e2.js
    • http://localhost:3000/assets/application-61c5e2b1b1952cf74ff1b12d450be24230a291f0f7b058011d3ee4fee32ec8e2.js
    • http://localhost:3000/assets/application-61c5e2b1b1952cf74ff1b12d450be24230a291f0f7b058011d3ee4fee32ec8e2.js
    • http://localhost:3000/assets/application-61c5e2b1b1952cf74ff1b12d450be24230a291f0f7b058011d3ee4fee32ec8e2.js
    • http://localhost:3000/assets/application-61c5e2b1b1952cf74ff1b12d450be24230a291f0f7b058011d3ee4fee32ec8e2.js
  • Loosely Scoped Cookie [90033] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/
  • Session Management Response Identified [10112] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/
  • User Agent Fuzzer [10104] total: 24:
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • ..

  Resolved Alerts

  • Content Security Policy (CSP) Header Not Set [10038] total: 3:

View the following link to download the report.
RunnerID:10531080707

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts
  • Dangerous JS Functions [10110] total: 1:

View the following link to download the report.
RunnerID:10684116732

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • Sub Resource Integrity Attribute Missing [90003] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/

  Resolved Alerts

  • Information Disclosure - Suspicious Comments [10027] total: 5:

View the following link to download the report.
RunnerID:10797231437

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts
  • Sub Resource Integrity Attribute Missing [90003] total: 2:

View the following link to download the report.
RunnerID:10797388951

[github-actions]

• Site: http://localhost:3000
  New Alerts
  • Information Disclosure - Suspicious Comments [10027] total: 5:
    • http://localhost:3000/assets/application-61c5e2b1b1952cf74ff1b12d450be24230a291f0f7b058011d3ee4fee32ec8e2.js
    • http://localhost:3000/assets/application-61c5e2b1b1952cf74ff1b12d450be24230a291f0f7b058011d3ee4fee32ec8e2.js
    • http://localhost:3000/assets/application-61c5e2b1b1952cf74ff1b12d450be24230a291f0f7b058011d3ee4fee32ec8e2.js
    • http://localhost:3000/assets/application-61c5e2b1b1952cf74ff1b12d450be24230a291f0f7b058011d3ee4fee32ec8e2.js
    • http://localhost:3000/assets/application-61c5e2b1b1952cf74ff1b12d450be24230a291f0f7b058011d3ee4fee32ec8e2.js

View the following link to download the report.
RunnerID:10797756088

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts
  • Information Disclosure - Suspicious Comments [10027] total: 5:

View the following link to download the report.
RunnerID:10800758144