ZAP Scan Baseline Report

[github-actions]

• Site: https://cdnjs.cloudflare.com

• Site: https://preview.owasp-juice.shop
  New Alerts

  • Missing Anti-clickjacking Header [10020] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Orm9laP&sid=CdmCzIdScXxkRPLbAACp
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Orm9mWi&sid=H_I95KTi3NTqOVBmAACr
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Orm9nQd&sid=rrxGJ3aHMm7cyJ43AACt
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Orm9oKS&sid=-6XQ9uyprJB7CPZvAACv
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Orm9q1a&sid=OpdR6yv98NlxrIAgAACx
    • ..
  • Session ID in URL Rewrite [3] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Orm9laT&sid=CdmCzIdScXxkRPLbAACp
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Orm9mWk&sid=H_I95KTi3NTqOVBmAACr
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Orm9nQe&sid=rrxGJ3aHMm7cyJ43AACt
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Orm9oKW&sid=-6XQ9uyprJB7CPZvAACv
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=websocket&sid=-6XQ9uyprJB7CPZvAACv
    • ..
  • Private IP Disclosure [2] total: 1:
    • https://preview.owasp-juice.shop/rest/admin/application-configuration
  • X-Content-Type-Options Header Missing [10021] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Orm9laT&sid=CdmCzIdScXxkRPLbAACp
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Orm9lXW
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Orm9mSb
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Orm9mWk&sid=H_I95KTi3NTqOVBmAACr
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Orm9nJi
    • ..

  Ignored Alerts

  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
  • Cross-Domain Misconfiguration [10098] total: 10:
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 6:
  • Dangerous JS Functions [10110] total: 2:
  • Deprecated Feature Policy Header Set [10063] total: 7:
  • Permissions Policy Header Not Set [10063] total: 1:
  • Strict-Transport-Security Header Not Set [10035] total: 10:
  • Timestamp Disclosure - Unix [10096] total: 10:
  • Base64 Disclosure [10094] total: 12:
  • Information Disclosure - Suspicious Comments [10027] total: 2:
  • Modern Web Application [10109] total: 3:
  • Non-Storable Content [10049] total: 1:
  • Re-examine Cache-control Directives [10015] total: 9:
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
  • Sec-Fetch-User Header is Missing [90005] total: 3:
  • Storable and Cacheable Content [10049] total: 1:
  • Storable but Non-Cacheable Content [10049] total: 8:

View the following link to download the report.
RunnerID:7768560240

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity. 📆 It will be closed automatically in one week if no further activity occurs.

[github-actions]

• Site: https://cdnjs.cloudflare.com

• Site: https://preview.owasp-juice.shop
  New Alerts

  • Missing Anti-clickjacking Header [10020] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OtSJCsc&sid=yZ1731vzd21spAryAACg
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OtSJDr9&sid=5wOka56H1BEOakLnAACk
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OtSJEg4&sid=FfA8tdXMNnwsNPUvAACp
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OtSJFbj&sid=ZrkWglFlnNepgHhoAACr
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OtSJGzD&sid=h4yTq_czdoD9PVt_AACx
    • ..
  • Session ID in URL Rewrite [3] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OtSJCse&sid=yZ1731vzd21spAryAACg
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OtSJDrA&sid=5wOka56H1BEOakLnAACk
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OtSJEg7&sid=FfA8tdXMNnwsNPUvAACp
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OtSJFbk&sid=ZrkWglFlnNepgHhoAACr
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=websocket&sid=5wOka56H1BEOakLnAACk
    • ..
  • Private IP Disclosure [2] total: 1:
    • https://preview.owasp-juice.shop/rest/admin/application-configuration
  • X-Content-Type-Options Header Missing [10021] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OtSJCp1
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OtSJCse&sid=yZ1731vzd21spAryAACg
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OtSJDm0
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OtSJDrA&sid=5wOka56H1BEOakLnAACk
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OtSJEb0
    • ..

  Ignored Alerts

  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
  • Cross-Domain Misconfiguration [10098] total: 9:
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 6:
  • Dangerous JS Functions [10110] total: 2:
  • Deprecated Feature Policy Header Set [10063] total: 7:
  • Permissions Policy Header Not Set [10063] total: 1:
  • Strict-Transport-Security Header Not Set [10035] total: 10:
  • Timestamp Disclosure - Unix [10096] total: 10:
  • Base64 Disclosure [10094] total: 10:
  • Information Disclosure - Suspicious Comments [10027] total: 2:
  • Modern Web Application [10109] total: 3:
  • Non-Storable Content [10049] total: 1:
  • Re-examine Cache-control Directives [10015] total: 9:
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
  • Sec-Fetch-User Header is Missing [90005] total: 3:
  • Storable and Cacheable Content [10049] total: 1:
  • Storable but Non-Cacheable Content [10049] total: 9:

View the following link to download the report.
RunnerID:8032291439

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity. 📆 It will be closed automatically in one week if no further activity occurs.

[github-actions]

• Site: https://cdnjs.cloudflare.com

• Site: https://preview.owasp-juice.shop
  New Alerts

  • Missing Anti-clickjacking Header [10020] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8SaB-&sid=fDaJ2q5PPC8UxQnEAACq
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8Saez&sid=GraJSSZSg9EyPkt0AACt
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8SaqT&sid=NhE4OCyog6DhlqfeAACw
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8SSux&sid=6iWLNSojS2x_0mP0AACJ
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8STqY&sid=ud21DYG-0xf4snmUAACP
    • ..
  • Session ID in URL Rewrite [3] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8SSuz&sid=6iWLNSojS2x_0mP0AACJ
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8STqZ&sid=ud21DYG-0xf4snmUAACP
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8SUm_&sid=NE2-wN2CNzOtXQTZAACR
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8SVkU&sid=L9876C2wodm_bzhOAACW
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=websocket&sid=6iWLNSojS2x_0mP0AACJ
    • ..
  • Private IP Disclosure [2] total: 1:
    • https://preview.owasp-juice.shop/rest/admin/application-configuration
  • X-Content-Type-Options Header Missing [10021] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8SSs1
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8SSuz&sid=6iWLNSojS2x_0mP0AACJ
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8STnM
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8STqZ&sid=ud21DYG-0xf4snmUAACP
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Ov8SUdx
    • ..

  Ignored Alerts

  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
  • Cross-Domain Misconfiguration [10098] total: 10:
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 6:
  • Dangerous JS Functions [10110] total: 2:
  • Deprecated Feature Policy Header Set [10063] total: 7:
  • Permissions Policy Header Not Set [10063] total: 1:
  • Strict-Transport-Security Header Not Set [10035] total: 11:
  • Timestamp Disclosure - Unix [10096] total: 10:
  • Base64 Disclosure [10094] total: 11:
  • Information Disclosure - Suspicious Comments [10027] total: 2:
  • Modern Web Application [10109] total: 3:
  • Non-Storable Content [10049] total: 1:
  • Re-examine Cache-control Directives [10015] total: 10:
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
  • Sec-Fetch-User Header is Missing [90005] total: 3:
  • Storable and Cacheable Content [10049] total: 1:
  • Storable but Non-Cacheable Content [10049] total: 9:

View the following link to download the report.
RunnerID:8309550918

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity. 📆 It will be closed automatically in one week if no further activity occurs.

[github-actions]

• Site: https://cdnjs.cloudflare.com

• Site: https://preview.owasp-juice.shop
  New Alerts

  • Missing Anti-clickjacking Header [10020] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Owqb-4L&sid=ry4A7AQmWGWAHoM9AAEU
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Owqb-Lb&sid=70857ofZ3asxxtHhAAEV
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Owqb-mY&sid=ijGn4HVAjn9fnXliAAEc
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Owqb_ek&sid=rND6ehK6r28YalDkAAEi
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=Owqb_I5&sid=ipeb7nESB-1Zh_0EAAEh
    • ..
  • Session ID in URL Rewrite [3] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OwqbtWG&sid=Vu-H6iUe8S-_d2w7AADg
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OwqbuRs&sid=wdvDm61YOloAR5dIAADm
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OwqbvaJ&sid=2bdvS9tWRt_YdRRlAADt
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OwqbwFr&sid=kGU0adgth8SadLosAADy
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=websocket&sid=2bdvS9tWRt_YdRRlAADt
    • ..
  • Private IP Disclosure [2] total: 1:
    • https://preview.owasp-juice.shop/rest/admin/application-configuration
  • X-Content-Type-Options Header Missing [10021] total: 12:
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OwqbtTE
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OwqbtWG&sid=Vu-H6iUe8S-_d2w7AADg
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OwqbuOb
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OwqbuRs&sid=wdvDm61YOloAR5dIAADm
    • https://preview.owasp-juice.shop/socket.io/?EIO=4&transport=polling&t=OwqbvaJ&sid=2bdvS9tWRt_YdRRlAADt
    • ..

  Ignored Alerts

  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
  • Cross-Domain Misconfiguration [10098] total: 9:
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 6:
  • Dangerous JS Functions [10110] total: 2:
  • Deprecated Feature Policy Header Set [10063] total: 7:
  • Permissions Policy Header Not Set [10063] total: 2:
  • Strict-Transport-Security Header Not Set [10035] total: 10:
  • Timestamp Disclosure - Unix [10096] total: 10:
  • Base64 Disclosure [10094] total: 11:
  • Information Disclosure - Suspicious Comments [10027] total: 2:
  • Modern Web Application [10109] total: 3:
  • Non-Storable Content [10049] total: 1:
  • Re-examine Cache-control Directives [10015] total: 9:
  • Sec-Fetch-Dest Header is Missing [90005] total: 4:
  • Sec-Fetch-Mode Header is Missing [90005] total: 4:
  • Sec-Fetch-Site Header is Missing [90005] total: 4:
  • Sec-Fetch-User Header is Missing [90005] total: 4:
  • Storable and Cacheable Content [10049] total: 1:
  • Storable but Non-Cacheable Content [10049] total: 8:

View the following link to download the report.
RunnerID:8582909218