ZAP Full Scan Report

[github-actions]

• Site: https://dev.hcapemployers.gov.bc.ca
  New Alerts
  • Proxy Disclosure [40025] total: 5:
    • https://dev.hcapemployers.gov.bc.ca/
    • https://dev.hcapemployers.gov.bc.ca/favicon.ico
    • https://dev.hcapemployers.gov.bc.ca/ie.js
    • https://dev.hcapemployers.gov.bc.ca/snowplow-tracker.js
    • https://dev.hcapemployers.gov.bc.ca/static
  • Cookie No HttpOnly Flag [10010] total: 5:
    • https://dev.hcapemployers.gov.bc.ca
    • https://dev.hcapemployers.gov.bc.ca/
    • https://dev.hcapemployers.gov.bc.ca/favicon.ico
    • https://dev.hcapemployers.gov.bc.ca/robots.txt
    • https://dev.hcapemployers.gov.bc.ca/sitemap.xml
  • Cookie Without Secure Flag [10011] total: 5:
    • https://dev.hcapemployers.gov.bc.ca
    • https://dev.hcapemployers.gov.bc.ca/
    • https://dev.hcapemployers.gov.bc.ca/robots.txt
    • https://dev.hcapemployers.gov.bc.ca/sitemap.xml
    • https://dev.hcapemployers.gov.bc.ca/static/css/main.89cada7d.css
  • Cookie without SameSite Attribute [10054] total: 5:
    • https://dev.hcapemployers.gov.bc.ca
    • https://dev.hcapemployers.gov.bc.ca/
    • https://dev.hcapemployers.gov.bc.ca/robots.txt
    • https://dev.hcapemployers.gov.bc.ca/sitemap.xml
    • https://dev.hcapemployers.gov.bc.ca/static/css/main.89cada7d.css
  • Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 4:
    • https://dev.hcapemployers.gov.bc.ca
    • https://dev.hcapemployers.gov.bc.ca/
    • https://dev.hcapemployers.gov.bc.ca/robots.txt
    • https://dev.hcapemployers.gov.bc.ca/sitemap.xml
  • Permissions Policy Header Not Set [10063] total: 5:
    • https://dev.hcapemployers.gov.bc.ca
    • https://dev.hcapemployers.gov.bc.ca/
    • https://dev.hcapemployers.gov.bc.ca/ie.js
    • https://dev.hcapemployers.gov.bc.ca/robots.txt
    • https://dev.hcapemployers.gov.bc.ca/sitemap.xml
  • Timestamp Disclosure - Unix [10096] total: 5:
    • https://dev.hcapemployers.gov.bc.ca/static/js/main.9f481df6.js
    • https://dev.hcapemployers.gov.bc.ca/static/js/main.9f481df6.js
    • https://dev.hcapemployers.gov.bc.ca/static/js/main.9f481df6.js
    • https://dev.hcapemployers.gov.bc.ca/static/js/main.9f481df6.js
    • https://dev.hcapemployers.gov.bc.ca/static/js/main.9f481df6.js
  • Cookie Slack Detector [90027] total: 5:
    • https://dev.hcapemployers.gov.bc.ca
    • https://dev.hcapemployers.gov.bc.ca/
    • https://dev.hcapemployers.gov.bc.ca/favicon.ico
    • https://dev.hcapemployers.gov.bc.ca/ie.js
    • https://dev.hcapemployers.gov.bc.ca/snowplow-tracker.js
  • Information Disclosure - Suspicious Comments [10027] total: 1:
    • https://dev.hcapemployers.gov.bc.ca/static/js/main.9f481df6.js
  • Modern Web Application [10109] total: 4:
    • https://dev.hcapemployers.gov.bc.ca
    • https://dev.hcapemployers.gov.bc.ca/
    • https://dev.hcapemployers.gov.bc.ca/robots.txt
    • https://dev.hcapemployers.gov.bc.ca/sitemap.xml
  • Non-Storable Content [10049] total: 5:
    • https://dev.hcapemployers.gov.bc.ca
    • https://dev.hcapemployers.gov.bc.ca/
    • https://dev.hcapemployers.gov.bc.ca/favicon.ico
    • https://dev.hcapemployers.gov.bc.ca/robots.txt
    • https://dev.hcapemployers.gov.bc.ca/sitemap.xml
  • Re-examine Cache-control Directives [10015] total: 4:
    • https://dev.hcapemployers.gov.bc.ca
    • https://dev.hcapemployers.gov.bc.ca/
    • https://dev.hcapemployers.gov.bc.ca/robots.txt
    • https://dev.hcapemployers.gov.bc.ca/sitemap.xml
  • User Agent Fuzzer [10104] total: 5:
    • https://dev.hcapemployers.gov.bc.ca
    • https://dev.hcapemployers.gov.bc.ca
    • https://dev.hcapemployers.gov.bc.ca/
    • https://dev.hcapemployers.gov.bc.ca/robots.txt
    • https://dev.hcapemployers.gov.bc.ca/sitemap.xml

View the following link to download the report.
RunnerID:20837687460

---

ZAP by Checkmarx