ZAP Full Scan Report #508
Description
- Site: https://sc-digital-centre-dev.bdm-dev.dts-stn.com
New Alerts- Application Error Disclosure [90022] total: 1:
- CSP: Wildcard Directive [10055] total: 4:
- CSP: script-src unsafe-inline [10055] total: 4:
- CSP: style-src unsafe-inline [10055] total: 4:
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
- Missing Anti-clickjacking Header [10020] total: 2:
- Proxy Disclosure [40025] total: 39:
- Cookie No HttpOnly Flag [10010] total: 2:
- Cookie Slack Detector [90027] total: 35:
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/404
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/_next
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/_next/static
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/_next/static/9ItUuzBdpnriGgoaRYhKN
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/_next/static/9ItUuzBdpnriGgoaRYhKN/_buildManifest.js
- ..
- Cookie Without Secure Flag [10011] total: 2:
- Cookie without SameSite Attribute [10054] total: 2:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 10:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 11:
- Strict-Transport-Security Header Not Set [10035] total: 2:
- Timestamp Disclosure - Unix [10096] total: 12:
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/_next/static/chunks/framework-5f4595e5518b5600.js
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/_next/static/chunks/framework-5f4595e5518b5600.js
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/_next/static/chunks/framework-5f4595e5518b5600.js
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/_next/static/chunks/framework-5f4595e5518b5600.js
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/_next/static/chunks/framework-5f4595e5518b5600.js
- ..
- X-Content-Type-Options Header Missing [10021] total: 2:
- Information Disclosure - Suspicious Comments [10027] total: 11:
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/_next/static/chunks/framework-5f4595e5518b5600.js
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/_next/static/chunks/main-f32f62a489e65e3d.js
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/_next/static/chunks/pages/_app-2d75880fd4f2b35c.js
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/_next/static/chunks/pages/index-db229af6bc67f540.js
- ..
- Modern Web Application [10109] total: 11:
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/_next/static/chunks/framework-5f4595e5518b5600.js
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/_next/static/chunks/pages/_app-2d75880fd4f2b35c.js
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
- https://sc-digital-centre-dev.bdm-dev.dts-stn.com/dashboard
- ..
- Re-examine Cache-control Directives [10015] total: 2:
- User Agent Fuzzer [10104] total: 7:
View the following link to download the report.
RunnerID:2782673824