New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ZAP Scan Baseline Report #93

Closed

github-actions bot opened this issue Apr 9, 2020 · 4 comments

github-actions bot commented Apr 9, 2020

Site: https://www.zaproxy.org
New Alerts
- Strict-Transport-Security Header Not Set [10035] total: 20:
- Cross-Domain Misconfiguration [10098] total: 20:
- Retrieved from Cache [10050] total: 20:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 20:
- X-Content-Type-Options Header Missing [10021] total: 20:
- Timestamp Disclosure - Unix [10096] total: 20:
- Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 20:
- Content Security Policy (CSP) Header Not Set [10038] total: 20:
- Loosely Scoped Cookie [90033] total: 3:
- Application Error Disclosure [90022] total: 3:
- Information Disclosure - Debug Error Messages [10023] total: 2:
  - https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/
  - https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Cookie Without Secure Flag [10011] total: 2:
  - https://www.zaproxy.org/robots.txt
  - https://www.zaproxy.org/
- Private IP Disclosure [2] total: 3:
- Reverse Tabnabbing [10108] total: 1:
  - https://www.zaproxy.org/cdn-cgi/l/email-protection
- PII Scanner [10062] total: 1:
  - https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/

View the following link to download the report.
RunnerID:74366119

Author

github-actions bot commented Apr 9, 2020

Site: https://www.zaproxy.org
Ignored Alerts
- Strict-Transport-Security Header Not Set [10035] total: 20:
- Cross-Domain Misconfiguration [10098] total: 20:
- Retrieved from Cache [10050] total: 20:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 20:
- X-Content-Type-Options Header Missing [10021] total: 20:
- Timestamp Disclosure - Unix [10096] total: 20:
- Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 20:
- Loosely Scoped Cookie [90033] total: 3:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Cookie Without Secure Flag [10011] total: 2:
- Private IP Disclosure [2] total: 3:
- Reverse Tabnabbing [10108] total: 1:
- PII Scanner [10062] total: 1:

View the following link to download the report.
RunnerID:74379241

Author

github-actions bot commented Apr 9, 2020

All the alerts have been resolved during the last ZAP Scan!

github-actions bot closed this as completed

chiragnsuthar commented Apr 28, 2021

need to solve. how to solve any idea third party js ?

Member

psiinon commented Apr 28, 2021

@chiragnsuthar this is a closed issue and is just for the zaproxy.org website.
If you have questions about ZAP scan results then please ask them on the ZAP User Group: https://groups.google.com/group/zaproxy-users

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment