ZAP Scan Baseline Report

[github-actions[bot]]

• Site: http://localhost:8090 New Alerts
  • CSP: Wildcard Directive [10055] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • CSP: script-src unsafe-inline [10055] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • CSP: style-src unsafe-inline [10055] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • Sub Resource Integrity Attribute Missing [90003] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • Dangerous JS Functions [10110] total: 3:
    • http://localhost:8090/dist/app.js?v=kQoArn7vGfeSIJk7k_o-d5xnrUc_5Pc0jBQdKPLZcaM
    • http://localhost:8090/dist/vendor.js?v=CrgXH2EvizBu-H2lezNUn_MMVPmmzwrPvCcvlbUoFiQ
    • http://localhost:8090/modules/$(VirtoCommerce.Notifications)/dist/app.js?v=Ft4JfjXluLI6B6I5iLhRHLW2ibwp_Zyf1DHWuhJtjdQ
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/modules/$(VirtoCommerce.Assets)/dist/app.js?v=CUBQus5NuARE0JP9znNYzikAV0QOTQ4YnR6yXdr2o5w
    • http://localhost:8090/modules/$(VirtoCommerce.Core)/dist/app.js?v=GMMit6HpV34jawzXX2RVzs2TJBmYycnES02Q3UrXbJk
    • http://localhost:8090/modules/$(VirtoCommerce.Customer)/dist/app.js?v=87SHBUD70_8wjkNVEOFdY0vSgEn7W5qV0sWUx2uq2Yc
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:8090/modules/$(VirtoCommerce.Notifications)/dist/app.js?v=Ft4JfjXluLI6B6I5iLhRHLW2ibwp_Zyf1DHWuhJtjdQ
  • Base64 Disclosure [10094] total: 5:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/dist/app.js?v=kQoArn7vGfeSIJk7k_o-d5xnrUc_5Pc0jBQdKPLZcaM
    • http://localhost:8090/dist/style.css?v=19aI3nZRKqFlT4usR-l7IWUTD7_9V6PZCrAF_YApFO8
    • http://localhost:8090/dist/vendor.js?v=CrgXH2EvizBu-H2lezNUn_MMVPmmzwrPvCcvlbUoFiQ
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/modules/$(VirtoCommerce.Assets)/dist/app.js?v=CUBQus5NuARE0JP9znNYzikAV0QOTQ4YnR6yXdr2o5w
    • http://localhost:8090/modules/$(VirtoCommerce.Catalog)/dist/app.js?v=Y1EbVKhuLnESdKFV0nDLdZY8peF4joNz55ZMS72q2aA
    • http://localhost:8090/modules/$(VirtoCommerce.Core)/dist/app.js?v=GMMit6HpV34jawzXX2RVzs2TJBmYycnES02Q3UrXbJk
    • ..
  • Modern Web Application [10109] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:8090/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • http://localhost:8090/robots.txt
    • http://localhost:8090/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:8090/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • http://localhost:8090/robots.txt
    • http://localhost:8090/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:8090/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • http://localhost:8090/robots.txt
    • http://localhost:8090/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:8090/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • http://localhost:8090/robots.txt
    • http://localhost:8090/sitemap.xml
  • Storable and Cacheable Content [10049] total: 11:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • http://localhost:8090/modules/$(VirtoCommerce.Customer)/dist/style.css?v=VexL7D7TvPYyKPfzXG32PVA8ZNJt_Q4e5C9PZXQr3G8
    • http://localhost:8090/modules/$(VirtoCommerce.Marketing)/dist/style.css?v=h6krT3CIVkjJpxJpgx2KJylErNVJZB-nc3Z_DZCGAkM
    • ..

View the following link to download the report. RunnerID:9207668384

---

ZAP is supported by the Crash Override Open Source Fellowship