ZAP Full Scan Report

[souro1212]

• Site: https://devsecops-appsec.github.io
  New Alerts
  • CORS Misconfiguration [40040] total: 2:
    • https://devsecops-appsec.github.io/react-project
    • https://devsecops-appsec.github.io/react-project/
  • CSP: Wildcard Directive [10055] total: 4:
    • https://devsecops-appsec.github.io/
    • https://devsecops-appsec.github.io/robots.txt
    • https://devsecops-appsec.github.io/robots.txt
    • https://devsecops-appsec.github.io/sitemap.xml
  • CSP: style-src unsafe-inline [10055] total: 3:
    • https://devsecops-appsec.github.io/
    • https://devsecops-appsec.github.io/robots.txt
    • https://devsecops-appsec.github.io/sitemap.xml
  • Content Security Policy (CSP) Header Not Set [10038] total: 1:
    • https://devsecops-appsec.github.io/react-project/
  • Cross-Domain Misconfiguration [10098] total: 1:
    • https://devsecops-appsec.github.io/react-project/
  • Missing Anti-clickjacking Header [10020] total: 1:
    • https://devsecops-appsec.github.io/react-project/
  • Relative Path Confusion [10051] total: 2:
    • https://devsecops-appsec.github.io/robots.txt
    • https://devsecops-appsec.github.io/sitemap.xml
  • Strict-Transport-Security Header Not Set [10035] total: 3:
    • https://devsecops-appsec.github.io/
    • https://devsecops-appsec.github.io/robots.txt
    • https://devsecops-appsec.github.io/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 1:
    • https://devsecops-appsec.github.io/react-project/
  • Base64 Disclosure [10094] total: 3:
    • https://devsecops-appsec.github.io/
    • https://devsecops-appsec.github.io/robots.txt
    • https://devsecops-appsec.github.io/sitemap.xml
  • CSP: Header & Meta [10055] total: 3:
    • https://devsecops-appsec.github.io/
    • https://devsecops-appsec.github.io/robots.txt
    • https://devsecops-appsec.github.io/sitemap.xml
  • Modern Web Application [10109] total: 1:
    • https://devsecops-appsec.github.io/react-project/
  • Re-examine Cache-control Directives [10015] total: 1:
    • https://devsecops-appsec.github.io/react-project/
  • Retrieved from Cache [10050] total: 4:
    • https://devsecops-appsec.github.io/
    • https://devsecops-appsec.github.io/react-project/
    • https://devsecops-appsec.github.io/robots.txt
    • https://devsecops-appsec.github.io/sitemap.xml
  • Storable and Cacheable Content [10049] total: 4:
    • https://devsecops-appsec.github.io/
    • https://devsecops-appsec.github.io/react-project/
    • https://devsecops-appsec.github.io/robots.txt
    • https://devsecops-appsec.github.io/sitemap.xml
  • User Agent Fuzzer [10104] total: 12:
    • https://devsecops-appsec.github.io/react-project
    • https://devsecops-appsec.github.io/react-project
    • https://devsecops-appsec.github.io/react-project
    • https://devsecops-appsec.github.io/react-project
    • https://devsecops-appsec.github.io/react-project
    • ..

View the following link to download the report.
RunnerID:5473168637