ZAP Scan Baseline Report

[github-actions]

• Site: https://d3sgnc53fnji2s.cloudfront.net
  New Alerts

  • Sub Resource Integrity Attribute Missing [90003] total: 5:
    • https://d3sgnc53fnji2s.cloudfront.net
    • https://d3sgnc53fnji2s.cloudfront.net/
    • https://d3sgnc53fnji2s.cloudfront.net/dashboard
    • https://d3sgnc53fnji2s.cloudfront.net/login
    • https://d3sgnc53fnji2s.cloudfront.net/public/favicon.svg
  • Re-examine Cache-control Directives [10015] total: 3:
    • https://d3sgnc53fnji2s.cloudfront.net/assets/site-KaZeob-x.webmanifest
    • https://d3sgnc53fnji2s.cloudfront.net/robots.txt
    • https://d3sgnc53fnji2s.cloudfront.net/sitemap.xml

  Ignored Alerts

  • CSP: script-src unsafe-eval [10055] total: 5:
  • CSP: style-src unsafe-inline [10055] total: 4:
  • Cross-Origin-Embedder-Policy Header Missing or Invalid [90004] total: 2:
  • Cross-Origin-Opener-Policy Header Missing or Invalid [90004] total: 2:
  • Cross-Origin-Resource-Policy Header Missing or Invalid [90004] total: 5:
  • Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 5:
  • Timestamp Disclosure - Unix [10096] total: 5:
  • Information Disclosure - Suspicious Comments [10027] total: 1:
  • Modern Web Application [10109] total: 5:
  • Non-Storable Content [10049] total: 4:
  • Storable and Cacheable Content [10049] total: 5:

View the following link to download the report.
RunnerID:27908474738

---

ZAP is supported by the Crash Override Open Source Fellowship