ZAP Full Scan Report

[github-actions]

• Site: http://localhost:3000
  New Alerts
  • Cloud Metadata Potentially Exposed [90034] total: 1:
    • http://localhost:3000/latest/meta-data/
  • CSP: Wildcard Directive [10055] total: 3:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • CSP: script-src unsafe-eval [10055] total: 3:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • CSP: script-src unsafe-inline [10055] total: 3:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • CSP: style-src unsafe-inline [10055] total: 3:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
  • Hidden File Found [40035] total: 1:
    • http://localhost:3000/BitKeeper
  • Application Error Disclosure [90022] total: 4:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Information Disclosure - Debug Error Messages [10023] total: 4:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • Non-Storable Content [10049] total: 4:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml

View the following link to download the report.
RunnerID:5148086608

[github-actions]

• Site: http://localhost:3000
  New Alerts
  • Sub Resource Integrity Attribute Missing [90003] total: 11:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/en/404/
    • http://localhost:3000/en/500/
    • http://localhost:3000/en/contact-us/
    • ..
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 11:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/en/404/
    • http://localhost:3000/en/500/
    • http://localhost:3000/en/contact-us/
    • ..
  • Content-Type Header Missing [10019] total: 12:
    • http://localhost:3000/404
    • http://localhost:3000/404/
    • http://localhost:3000/500
    • http://localhost:3000/500/
    • http://localhost:3000/en/contact-us
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 12:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-5f4595e5518b5600.js
    • http://localhost:3000/_next/static/chunks/main-2a87450f0acd4de5.js
    • http://localhost:3000/_next/static/chunks/pages/_app-d77df6b491c28bc1.js
    • ..
  • Modern Web Application [10109] total: 11:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/en/404/
    • http://localhost:3000/en/500/
    • http://localhost:3000/en/contact-us/
    • ..
  • User Agent Fuzzer [10104] total: 504:
    • http://localhost:3000/404
    • http://localhost:3000/404
    • http://localhost:3000/404
    • http://localhost:3000/404
    • http://localhost:3000/404
    • ..

View the following link to download the report.
RunnerID:5455306266

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • Permissions Policy Header Not Set [10063] total: 12:
    • http://localhost:3000/_next/static/chunks/framework-7a7e500878b44665.js
    • http://localhost:3000/_next/static/chunks/main-a1cabbaff74d0e59.js
    • http://localhost:3000/_next/static/chunks/pages/_app-2bb3c870342a05bb.js
    • http://localhost:3000/_next/static/chunks/pages/_error-03e9fcef4cc3ff72.js
    • http://localhost:3000/_next/static/chunks/pages/contact-us-5c012920c6bd9d21.js
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-a1cabbaff74d0e59.js
  • X-Content-Type-Options Header Missing [10021] total: 12:
    • http://localhost:3000/_next/static/chunks/framework-7a7e500878b44665.js
    • http://localhost:3000/_next/static/chunks/main-a1cabbaff74d0e59.js
    • http://localhost:3000/_next/static/chunks/pages/index-c70a2b9083da49f9.js
    • http://localhost:3000/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js
    • http://localhost:3000/_next/static/chunks/webpack-025e193fa1509740.js
    • ..

  Resolved Alerts

  • Hidden File Found [40035] total: 1:
  • Content-Type Header Missing [10019] total: 12:

View the following link to download the report.
RunnerID:6279261535

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • Hidden File Found [40035] total: 1:
    • http://localhost:3000/BitKeeper

  Resolved Alerts

  • Information Disclosure - Debug Error Messages [10023] total: 2:

View the following link to download the report.
RunnerID:6883038069

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts
  • Cloud Metadata Potentially Exposed [90034] total: 1:
  • Hidden File Found [40035] total: 1:

View the following link to download the report.
RunnerID:7727691721

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • Information Disclosure - Debug Error Messages [10023] total: 4:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml

  Resolved Alerts

  • Sub Resource Integrity Attribute Missing [90003] total: 11:
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 11:
  • Permissions Policy Header Not Set [10063] total: 10:
  • Timestamp Disclosure - Unix [10096] total: 1:
  • X-Content-Type-Options Header Missing [10021] total: 12:
  • Information Disclosure - Suspicious Comments [10027] total: 12:
  • Modern Web Application [10109] total: 11:
  • User Agent Fuzzer [10104] total: 24:

View the following link to download the report.
RunnerID:8886556678

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • Sub Resource Integrity Attribute Missing [90003] total: 11:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/en/404
    • http://localhost:3000/en/my-dashboard
    • http://localhost:3000/fr/404
    • ..
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 11:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/en/404
    • http://localhost:3000/en/my-dashboard
    • http://localhost:3000/fr/404
    • ..
  • Permissions Policy Header Not Set [10063] total: 10:
    • http://localhost:3000/_next/static/chunks/framework-5429a50ba5373c56.js
    • http://localhost:3000/_next/static/chunks/main-8eb5bfe75ec8ecab.js
    • http://localhost:3000/_next/static/chunks/pages/404-c58f1d9d2aa28f57.js
    • http://localhost:3000/_next/static/chunks/pages/500-d2593e18b907e918.js
    • http://localhost:3000/_next/static/chunks/pages/_app-03c35658982adbff.js
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:3000/_next/static/chunks/main-8eb5bfe75ec8ecab.js
  • X-Content-Type-Options Header Missing [10021] total: 12:
    • http://localhost:3000/_next/static/chunks/main-8eb5bfe75ec8ecab.js
    • http://localhost:3000/_next/static/chunks/pages/index-e05d885a6ecf21ef.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • http://localhost:3000/_next/static/chunks/webpack-025e193fa1509740.js
    • http://localhost:3000/_next/static/css/b6ea358abf01c15b.css
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 12:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-5429a50ba5373c56.js
    • http://localhost:3000/_next/static/chunks/main-8eb5bfe75ec8ecab.js
    • http://localhost:3000/_next/static/chunks/pages/index-e05d885a6ecf21ef.js
    • ..
  • Modern Web Application [10109] total: 11:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/en/404
    • http://localhost:3000/en/my-dashboard
    • http://localhost:3000/fr/404
    • ..
  • User Agent Fuzzer [10104] total: 24:
    • http://localhost:3000/en
    • http://localhost:3000/en
    • http://localhost:3000/en
    • http://localhost:3000/en
    • http://localhost:3000/en
    • ..

  Resolved Alerts

  • Information Disclosure - Debug Error Messages [10023] total: 4:

View the following link to download the report.
RunnerID:8899732834

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • Cloud Metadata Potentially Exposed [90034] total: 1:
    • http://localhost:3000/latest/meta-data/
  • Hidden File Found [40035] total: 1:
    • http://localhost:3000/BitKeeper
  • Information Disclosure - Debug Error Messages [10023] total: 3:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
  • Content-Type Header Missing [10019] total: 2:
    • http://localhost:3000/api
    • http://localhost:3000/api/

  Resolved Alerts

  • Sub Resource Integrity Attribute Missing [90003] total: 11:
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 11:
  • Permissions Policy Header Not Set [10063] total: 10:
  • Timestamp Disclosure - Unix [10096] total: 1:
  • X-Content-Type-Options Header Missing [10021] total: 12:
  • Information Disclosure - Suspicious Comments [10027] total: 12:
  • Modern Web Application [10109] total: 11:

View the following link to download the report.
RunnerID:9405212996

[github-actions]

• Site: https://localhost:3000

• Site: http://localhost:3000
  New Alerts

  • HTTP Only Site [10106] total: 1:
    • http://localhost:3000

  Resolved Alerts

  • Cloud Metadata Potentially Exposed [90034] total: 1:
  • Hidden File Found [40035] total: 1:
  • User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:9405452223

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • Cloud Metadata Potentially Exposed [90034] total: 1:
    • http://localhost:3000/latest/meta-data/
  • Hidden File Found [40035] total: 1:
    • http://localhost:3000/BitKeeper

  Resolved Alerts

  • HTTP Only Site [10106] total: 1:
  • Content-Type Header Missing [10019] total: 2:

View the following link to download the report.
RunnerID:9471149791

[github-actions]

• Site: http://localhost:3000
  New Alerts
  • Content-Type Header Missing [10019] total: 2:
    • http://localhost:3000/api
    • http://localhost:3000/api/
  • User Agent Fuzzer [10104] total: 12:
    • http://localhost:3000/api/
    • http://localhost:3000/api/
    • http://localhost:3000/api/
    • http://localhost:3000/api/
    • http://localhost:3000/api/
    • ..

View the following link to download the report.
RunnerID:9761456145

[github-actions]

• Site: https://localhost:3000

• Site: http://localhost:3000
  New Alerts

  • HTTP Only Site [10106] total: 1:
    • http://localhost:3000

  Resolved Alerts

  • Cloud Metadata Potentially Exposed [90034] total: 1:
  • User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:9810283274

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • Cloud Metadata Potentially Exposed [90034] total: 1:
    • http://localhost:3000/latest/meta-data/
  • User Agent Fuzzer [10104] total: 12:
    • http://localhost:3000/api/
    • http://localhost:3000/api/
    • http://localhost:3000/api/
    • http://localhost:3000/api/
    • http://localhost:3000/api/
    • ..

  Resolved Alerts

  • HTTP Only Site [10106] total: 1:

View the following link to download the report.
RunnerID:9810436200

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts
  • Cloud Metadata Potentially Exposed [90034] total: 1:

View the following link to download the report.
RunnerID:9812323042

[github-actions]

• Site: https://localhost:3000

• Site: http://localhost:3000
  New Alerts

  • Cloud Metadata Potentially Exposed [90034] total: 1:
    • http://localhost:3000/latest/meta-data/
  • HTTP Only Site [10106] total: 1:
    • http://localhost:3000

View the following link to download the report.
RunnerID:9812333274

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts
  • HTTP Only Site [10106] total: 1:

View the following link to download the report.
RunnerID:10113763199