ZAP Security Report: backend

[github-actions]

• Site: https://csa-test.apps.silver.devops.gov.bc.ca
  New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • https://csa-test.apps.silver.devops.gov.bc.ca/
    • https://csa-test.apps.silver.devops.gov.bc.ca/api
    • https://csa-test.apps.silver.devops.gov.bc.ca/robots.txt
    • https://csa-test.apps.silver.devops.gov.bc.ca/sitemap.xml
  • Permissions Policy Header Not Set [10063] total: 4:
    • https://csa-test.apps.silver.devops.gov.bc.ca/
    • https://csa-test.apps.silver.devops.gov.bc.ca/api
    • https://csa-test.apps.silver.devops.gov.bc.ca/robots.txt
    • https://csa-test.apps.silver.devops.gov.bc.ca/sitemap.xml
  • Strict-Transport-Security Header Not Set [10035] total: 4:
    • https://csa-test.apps.silver.devops.gov.bc.ca/
    • https://csa-test.apps.silver.devops.gov.bc.ca/api
    • https://csa-test.apps.silver.devops.gov.bc.ca/robots.txt
    • https://csa-test.apps.silver.devops.gov.bc.ca/sitemap.xml
  • Non-Storable Content [10049] total: 4:
    • https://csa-test.apps.silver.devops.gov.bc.ca/
    • https://csa-test.apps.silver.devops.gov.bc.ca/api
    • https://csa-test.apps.silver.devops.gov.bc.ca/robots.txt
    • https://csa-test.apps.silver.devops.gov.bc.ca/sitemap.xml

View the following link to download the report.
RunnerID:20393409856

---

ZAP by Checkmarx