ZAP Scan Baseline Report

[github-actions]

• Site: https://revampd.app.cloud.gov
  New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • https://revampd.app.cloud.gov/
    • https://revampd.app.cloud.gov/sitemap.xml
    • https://revampd.app.cloud.gov/robots.txt
    • https://revampd.app.cloud.gov
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 6:
    • https://revampd.app.cloud.gov/
    • https://revampd.app.cloud.gov
    • https://revampd.app.cloud.gov/
    • https://revampd.app.cloud.gov
    • https://revampd.app.cloud.gov/
    • ..
  • Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 2:
    • https://revampd.app.cloud.gov/
    • https://revampd.app.cloud.gov

View the following link to download the report.
RunnerID:105755842

[github-actions]

• Site: https://revampd.app.cloud.gov
  New Alerts
  • Timestamp Disclosure - Unix [10096] total: 1:
    • https://revampd.app.cloud.gov

View the following link to download the report.
RunnerID:105931830

[github-actions]

• Site: https://revampd.app.cloud.gov
  Resolved Alerts
  • Timestamp Disclosure - Unix [10096] total: 1:

View the following link to download the report.
RunnerID:106049004

[github-actions]

• Site: https://revampd.app.cloud.gov
  New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 2:
    • https://revampd.app.cloud.gov/
    • https://revampd.app.cloud.gov
  • Information Disclosure - Suspicious Comments [10027] total: 2:
    • https://revampd.app.cloud.gov
    • https://revampd.app.cloud.gov/

View the following link to download the report.
RunnerID:106072355

[github-actions]

• Site: https://revampd.app.cloud.gov
  New Alerts
  • Timestamp Disclosure - Unix [10096] total: 1:
    • https://revampd.app.cloud.gov/sitemap.xml

View the following link to download the report.
RunnerID:118293961

[github-actions]

• Site: https://revampd.app.cloud.gov
  Resolved Alerts
  • Timestamp Disclosure - Unix [10096] total: 1:

View the following link to download the report.
RunnerID:119147753

[github-actions]

• Site: http://localhost:9080
  New Alerts
  • Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 8:
    • http://localhost:9080/src/app.js
    • http://localhost:9080/style.css
    • http://localhost:9080/sitemap.xml
    • http://localhost:9080/robots.txt
    • http://localhost:9080/%7BHOME%20PAGE%20LINK%7D
    • ..
  • Absence of Anti-CSRF Tokens [10202] total: 2:
    • http://localhost:9080
    • http://localhost:9080/
  • X-Content-Type-Options Header Missing [10021] total: 4:
    • http://localhost:9080/src/app.js
    • http://localhost:9080
    • http://localhost:9080/
    • http://localhost:9080/style.css
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 4:
    • http://localhost:9080/
    • http://localhost:9080
    • http://localhost:9080
    • http://localhost:9080/
  • HTTP to HTTPS Insecure Transition in Form Post [10041] total: 2:
    • http://localhost:9080/
    • http://localhost:9080
  • X-Frame-Options Header Not Set [10020] total: 2:
    • http://localhost:9080/
    • http://localhost:9080
  • Cross-Domain Misconfiguration [10098] total: 4:
    • http://localhost:9080/style.css
    • http://localhost:9080
    • http://localhost:9080/
    • http://localhost:9080/src/app.js
  • Content Security Policy (CSP) Header Not Set [10038] total: 6:
    • http://localhost:9080/%7BCONTACT%20URL%7D
    • http://localhost:9080
    • http://localhost:9080/
    • http://localhost:9080/%7BHOME%20PAGE%20LINK%7D
    • http://localhost:9080/robots.txt
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 2:
    • http://localhost:9080
    • http://localhost:9080/

View the following link to download the report.
RunnerID:119295503

[github-actions]

• Site: http://localhost:9080
  Resolved Alerts
  • Information Disclosure - Suspicious Comments [10027] total: 2:

View the following link to download the report.
RunnerID:119304717

[github-actions]

• Site: http://localhost:9080
  New Alerts
  • Modern Web Application [10109] total: 2:
    • http://localhost:9080/
    • http://localhost:9080

View the following link to download the report.
RunnerID:122527717

[github-actions]

• Site: http://localhost:9080
  New Alerts
  • Timestamp Disclosure - Unix [10096] total: 20:
    • http://localhost:9080/swaggerUI/swagger-ui-bundle.js
    • http://localhost:9080/swaggerUI/swagger-ui-bundle.js
    • http://localhost:9080/swaggerUI/swagger-ui-bundle.js
    • http://localhost:9080/swaggerUI/swagger-ui-standalone-preset.js
    • http://localhost:9080/swaggerUI/swagger-ui-standalone-preset.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 2:
    • http://localhost:9080/swaggerUI/swagger-ui-standalone-preset.js
    • http://localhost:9080/swaggerUI/swagger-ui-bundle.js
  • Private IP Disclosure [2] total: 1:
    • http://localhost:9080/swaggerUI/swagger-ui-bundle.js

View the following link to download the report.
RunnerID:149131342

[github-actions]

• Site: http://localhost:9080
  Resolved Alerts
  • Timestamp Disclosure - Unix [10096] total: 20:
  • Information Disclosure - Suspicious Comments [10027] total: 2:
  • Private IP Disclosure [2] total: 1:

View the following link to download the report.
RunnerID:151434471

[github-actions]

• Site: http://localhost:9080
  New Alerts
  • Timestamp Disclosure - Unix [10096] total: 20:
    • http://localhost:9080/swaggerUI/swagger-ui-bundle.js
    • http://localhost:9080/swaggerUI/swagger-ui-bundle.js
    • http://localhost:9080/swaggerUI/swagger-ui-bundle.js
    • http://localhost:9080/swaggerUI/swagger-ui-standalone-preset.js
    • http://localhost:9080/swaggerUI/swagger-ui-standalone-preset.js
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 2:
    • http://localhost:9080/swaggerUI/swagger-ui-standalone-preset.js
    • http://localhost:9080/swaggerUI/swagger-ui-bundle.js
  • Private IP Disclosure [2] total: 1:
    • http://localhost:9080/swaggerUI/swagger-ui-bundle.js

View the following link to download the report.
RunnerID:154290132