ZAP Scan Baseline Report

[github-actions[bot]]

• Site: http://localhost:8090 New Alerts
  • CSP: Wildcard Directive [10055] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • CSP: script-src unsafe-inline [10055] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • CSP: style-src unsafe-inline [10055] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • Sub Resource Integrity Attribute Missing [90003] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • Dangerous JS Functions [10110] total: 3:
    • http://localhost:8090/dist/app.js?v=q16TAjUKNs-nJp8_2Und1IeekSIjB5P341bLwvZhg-I
    • http://localhost:8090/dist/vendor.js?v=CrgXH2EvizBu-H2lezNUn_MMVPmmzwrPvCcvlbUoFiQ
    • http://localhost:8090/modules/$(VirtoCommerce.Notifications)/dist/app.js?v=Ft4JfjXluLI6B6I5iLhRHLW2ibwp_Zyf1DHWuhJtjdQ
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/modules/$(VirtoCommerce.Assets)/dist/app.js?v=ofhnrHdem1Z7XLNx-hWL3xUCPnnMgVy4B6WqnwVT7IE
    • http://localhost:8090/modules/$(VirtoCommerce.BulkActionsModule)/dist/app.js?v=bx2WCaYbo0S7frA5b2VtDkxui4XLMmhsAYoa_v7Q3OA
    • http://localhost:8090/modules/$(VirtoCommerce.Core)/dist/app.js?v=1448k7R_aLlHSJZ3YHgh_mE_kMnQ_5qBa5Iti_kSMVU
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:8090/modules/$(VirtoCommerce.Notifications)/dist/app.js?v=Ft4JfjXluLI6B6I5iLhRHLW2ibwp_Zyf1DHWuhJtjdQ
  • Base64 Disclosure [10094] total: 5:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/dist/app.js?v=q16TAjUKNs-nJp8_2Und1IeekSIjB5P341bLwvZhg-I
    • http://localhost:8090/dist/style.css?v=9vFvc4H6y20G_umliUup6XHj2BVR9E9idlvb6wGwgPc
    • http://localhost:8090/dist/vendor.js?v=CrgXH2EvizBu-H2lezNUn_MMVPmmzwrPvCcvlbUoFiQ
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/modules/$(VirtoCommerce.Assets)/dist/app.js?v=ofhnrHdem1Z7XLNx-hWL3xUCPnnMgVy4B6WqnwVT7IE
    • http://localhost:8090/modules/$(VirtoCommerce.CatalogPublishing)/dist/app.js?v=c8dfxSgo9yBtNoDb_a841DpggMqV-NJsdFWIKjIc0Bk
    • http://localhost:8090/modules/$(VirtoCommerce.Core)/dist/app.js?v=1448k7R_aLlHSJZ3YHgh_mE_kMnQ_5qBa5Iti_kSMVU
    • ..
  • Modern Web Application [10109] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:8090
    • http://localhost:8090/robots.txt
    • http://localhost:8090/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:8090
    • http://localhost:8090/robots.txt
    • http://localhost:8090/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:8090
    • http://localhost:8090/robots.txt
    • http://localhost:8090/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:8090
    • http://localhost:8090/robots.txt
    • http://localhost:8090/sitemap.xml
  • Storable and Cacheable Content [10049] total: 11:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • http://localhost:8090/modules/$(VirtoCommerce.Core)/dist/style.css?v=JxV59GTG-OlnR0vCng7qmL0bUL_hI5YdQOSjYMpqEsw
    • http://localhost:8090/modules/$(VirtoCommerce.Export)/dist/style.css?v=jiZ7EUUA6mUrnxE_mxjQq3Pvb-UDsH41RdhLJrUdrXY
    • ..

View the following link to download the report. RunnerID:8000320754

[mvktsk]

Task https://virtocommerce.atlassian.net/browse/VP-8543 has been created