ZAP Scan Baseline Report

[github-actions]

• Site: https://cdnjs.cloudflare.com

• Site: https://preview.owasp-juice.shop
  New Alerts

  • Missing Anti-clickjacking Header [10020] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P4zUHjM&sid=t7h4xcgImQ1HCSlpAAEH
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P4zUIfF&sid=6FhwVlMusU3zzBObAAEN
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P4zUJXc&sid=1Z060lCh1GDByPyyAAEQ
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P4zUKZ5&sid=Dl_mqBLaermcwwX2AAEX
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P4zULru&sid=-9VrnjcW4Ng7noATAAEi
    • ..
  • Session ID in URL Rewrite [3] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P4zUHjO&sid=t7h4xcgImQ1HCSlpAAEH
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P4zUIfJ&sid=6FhwVlMusU3zzBObAAEN
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P4zUJXd&sid=1Z060lCh1GDByPyyAAEQ
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P4zUKZA&sid=Dl_mqBLaermcwwX2AAEX
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=websocket&sid=1Z060lCh1GDByPyyAAEQ
    • ..
  • Private IP Disclosure [2] total: 1:
    • https://preview.owasp-juice.shop/rest/admin/application-configuration
  • X-Content-Type-Options Header Missing [10021] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P4zUHg3
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P4zUHjO&sid=t7h4xcgImQ1HCSlpAAEH
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P4zUIcC
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P4zUIfJ&sid=6FhwVlMusU3zzBObAAEN
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P4zUJR2
    • ..

  Ignored Alerts

  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
  • Cross-Domain Misconfiguration [10098] total: 10:
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 6:
  • Dangerous JS Functions [10110] total: 2:
  • Deprecated Feature Policy Header Set [10063] total: 7:
  • Permissions Policy Header Not Set [10063] total: 1:
  • Strict-Transport-Security Header Not Set [10035] total: 11:
  • Timestamp Disclosure - Unix [10096] total: 10:
  • Base64 Disclosure [10094] total: 11:
  • Information Disclosure - Suspicious Comments [10027] total: 2:
  • Modern Web Application [10109] total: 3:
  • Non-Storable Content [10049] total: 1:
  • Re-examine Cache-control Directives [10015] total: 10:
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
  • Sec-Fetch-User Header is Missing [90005] total: 3:
  • Storable and Cacheable Content [10049] total: 1:
  • Storable but Non-Cacheable Content [10049] total: 9:

View the following link to download the report.
RunnerID:10333504769

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity. 📆 It will be closed automatically in one week if no further activity occurs.

[github-actions]

• Site: https://cdnjs.cloudflare.com

• Site: https://preview.owasp-juice.shop
  New Alerts

  • Missing Anti-clickjacking Header [10020] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P6fdlvG&sid=SgI0b2gZGg1afKJeAAHv
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P6fdmyb&sid=4-G4SYFWUwvgdSxsAAH1
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P6fdnxl&sid=jsFrf6IbKcIj1xsTAAH4
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P6fdo_Y&sid=JMShzyjS_OyUtmrKAAH7
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P6fdq7u&sid=s7sRBbOBQpugryJ0AAIB
    • ..
  • Session ID in URL Rewrite [3] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P6fdlvI&sid=SgI0b2gZGg1afKJeAAHv
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P6fdmyd&sid=4-G4SYFWUwvgdSxsAAH1
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P6fdnxn&sid=jsFrf6IbKcIj1xsTAAH4
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P6fdo_g&sid=JMShzyjS_OyUtmrKAAH7
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=websocket&sid=4-G4SYFWUwvgdSxsAAH1
    • ..
  • Private IP Disclosure [2] total: 1:
    • https://preview.owasp-juice.shop/rest/admin/application-configuration
  • X-Content-Type-Options Header Missing [10021] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P6fdlqZ
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P6fdlvI&sid=SgI0b2gZGg1afKJeAAHv
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P6fdmuS
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P6fdmyd&sid=4-G4SYFWUwvgdSxsAAH1
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=P6fdnrX
    • ..

  Ignored Alerts

  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
  • Cross-Domain Misconfiguration [10098] total: 9:
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 6:
  • Dangerous JS Functions [10110] total: 2:
  • Deprecated Feature Policy Header Set [10063] total: 7:
  • Permissions Policy Header Not Set [10063] total: 1:
  • Strict-Transport-Security Header Not Set [10035] total: 10:
  • Timestamp Disclosure - Unix [10096] total: 10:
  • Base64 Disclosure [10094] total: 12:
  • Information Disclosure - Suspicious Comments [10027] total: 2:
  • Modern Web Application [10109] total: 3:
  • Non-Storable Content [10049] total: 1:
  • Re-examine Cache-control Directives [10015] total: 7:
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
  • Sec-Fetch-User Header is Missing [90005] total: 3:
  • Storable and Cacheable Content [10049] total: 1:
  • Storable but Non-Cacheable Content [10049] total: 8:

View the following link to download the report.
RunnerID:10647252732

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity. 📆 It will be closed automatically in one week if no further activity occurs.