ZAP Security Report: backend

[github-actions]

• Site: https://common-notify-test.apps.silver.devops.gov.bc.ca
  New Alerts

  • CSP: script-src unsafe-inline [10055] total: 2:
    • https://common-notify-test.apps.silver.devops.gov.bc.ca/
    • https://common-notify-test.apps.silver.devops.gov.bc.ca/sitemap.xml
  • CSP: style-src unsafe-inline [10055] total: 2:
    • https://common-notify-test.apps.silver.devops.gov.bc.ca/
    • https://common-notify-test.apps.silver.devops.gov.bc.ca/sitemap.xml
  • Proxy Disclosure [40025] total: 5:
    • https://common-notify-test.apps.silver.devops.gov.bc.ca
    • https://common-notify-test.apps.silver.devops.gov.bc.ca/
    • https://common-notify-test.apps.silver.devops.gov.bc.ca/api
    • https://common-notify-test.apps.silver.devops.gov.bc.ca/assets
    • https://common-notify-test.apps.silver.devops.gov.bc.ca/static
  • Cross-Origin-Embedder-Policy Header Missing or Invalid [90004] total: 2:
    • https://common-notify-test.apps.silver.devops.gov.bc.ca/
    • https://common-notify-test.apps.silver.devops.gov.bc.ca/sitemap.xml

  Ignored Alerts

  • Timestamp Disclosure - Unix [10096] total: 1:
  • Modern Web Application [10109] total: 2:
  • Non-Storable Content [10049] total: 5:

View the following link to download the report.
RunnerID:35439407945

---

ZAP by Checkmarx