ZAP Scan Baseline Report

[github-actions]

• Site: http://localhost:8090
  New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • Vulnerable JS Library [10003] total: 2:
    • http://localhost:8090/dist/vendor.js?v=yfUOaxxk9-ATFjmDt1fFE_uCc3lkd00zOKnfYHMRu3k
    • http://localhost:8090/modules/$(VirtoCommerce.Core)/dist/app.js?v=hJEQQDOcI91I41dZYtv9B6aVPFBSU2AQ7s7QcOm5oQs
  • Dangerous JS Functions [10110] total: 4:
    • http://localhost:8090/dist/app.js?v=aFdhnApeIQoRkd4huhAojWHC1ECddEVe_p5_MD5aeJk
    • http://localhost:8090/dist/vendor.js?v=yfUOaxxk9-ATFjmDt1fFE_uCc3lkd00zOKnfYHMRu3k
    • http://localhost:8090/modules/$(VirtoCommerce.Core)/dist/app.js?v=hJEQQDOcI91I41dZYtv9B6aVPFBSU2AQ7s7QcOm5oQs
    • http://localhost:8090/modules/$(VirtoCommerce.Notifications)/dist/app.js?v=3r4S_uT70ywpW4MDsbuhKP9iAOjHx8ViNpikZWmMgNg
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/dist/app.js?v=aFdhnApeIQoRkd4huhAojWHC1ECddEVe_p5_MD5aeJk
    • http://localhost:8090/dist/vendor.js?v=yfUOaxxk9-ATFjmDt1fFE_uCc3lkd00zOKnfYHMRu3k
    • http://localhost:8090/modules/$(VirtoCommerce.Assets)/dist/app.js?v=OKwCpQb2pRwgRshorsI2mXyJGeQAHz9XJFzUEOuhgMk
    • ..
  • Timestamp Disclosure - Unix [10096] total: 12:
    • http://localhost:8090/dist/style.css?v=FJjn0Z4S7CPHdVmHNJ4Kr8abWCJR89WePWUye3iuBiQ
    • http://localhost:8090/dist/style.css?v=FJjn0Z4S7CPHdVmHNJ4Kr8abWCJR89WePWUye3iuBiQ
    • http://localhost:8090/dist/style.css?v=FJjn0Z4S7CPHdVmHNJ4Kr8abWCJR89WePWUye3iuBiQ
    • http://localhost:8090/dist/vendor.js?v=yfUOaxxk9-ATFjmDt1fFE_uCc3lkd00zOKnfYHMRu3k
    • http://localhost:8090/dist/vendor.js?v=yfUOaxxk9-ATFjmDt1fFE_uCc3lkd00zOKnfYHMRu3k
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/dist/style.css?v=FJjn0Z4S7CPHdVmHNJ4Kr8abWCJR89WePWUye3iuBiQ
    • http://localhost:8090/favicon.ico
    • http://localhost:8090/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=QekYJe_dU9hWtK55zgV52ztLT8ObUxdS_3SoKp4ZceE
    • ..
  • Base64 Disclosure [10094] total: 11:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/dist/style.css?v=FJjn0Z4S7CPHdVmHNJ4Kr8abWCJR89WePWUye3iuBiQ
    • http://localhost:8090/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=QekYJe_dU9hWtK55zgV52ztLT8ObUxdS_3SoKp4ZceE
    • http://localhost:8090/modules/$(VirtoCommerce.Content)/dist/style.css?v=hi6GOxxdbfalx1EwI4zUAXCQlDVoig3i0xcfJ74ZqKQ
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/dist/app.js?v=aFdhnApeIQoRkd4huhAojWHC1ECddEVe_p5_MD5aeJk
    • http://localhost:8090/dist/app.js?v=aFdhnApeIQoRkd4huhAojWHC1ECddEVe_p5_MD5aeJk
    • http://localhost:8090/dist/app.js?v=aFdhnApeIQoRkd4huhAojWHC1ECddEVe_p5_MD5aeJk
    • ..
  • Modern Web Application [10109] total: 5:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/dist/app.js?v=aFdhnApeIQoRkd4huhAojWHC1ECddEVe_p5_MD5aeJk
    • http://localhost:8090/dist/vendor.js?v=yfUOaxxk9-ATFjmDt1fFE_uCc3lkd00zOKnfYHMRu3k
    • http://localhost:8090/modules/$(VirtoCommerce.Core)/dist/app.js?v=hJEQQDOcI91I41dZYtv9B6aVPFBSU2AQ7s7QcOm5oQs
  • Storable and Cacheable Content [10049] total: 11:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/dist/style.css?v=FJjn0Z4S7CPHdVmHNJ4Kr8abWCJR89WePWUye3iuBiQ
    • http://localhost:8090/favicon.ico
    • http://localhost:8090/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=QekYJe_dU9hWtK55zgV52ztLT8ObUxdS_3SoKp4ZceE
    • ..

View the following link to download the report.
RunnerID:2716941964

[mvktsk]

Task https://virtocommerce.atlassian.net/browse/VP-8130 has been created

[github-actions]

• Site: http://localhost:8090
  Resolved Alerts
  • Dangerous JS Functions [10110] total: 4:
  • Permissions Policy Header Not Set [10063] total: 11:
  • Base64 Disclosure [10094] total: 11:
  • Modern Web Application [10109] total: 5:
  • Storable and Cacheable Content [10049] total: 11:

View the following link to download the report.
RunnerID:3043565672

[github-actions]

• Site: http://localhost:8090
  New Alerts
  • Dangerous JS Functions [10110] total: 4:
    • http://localhost:8090/dist/app.js?v=bCvrJ2mDaAhRQekXTjMgUQ7c1COKWG0Ka6Qkwu-y9Hc
    • http://localhost:8090/dist/vendor.js?v=yfUOaxxk9-ATFjmDt1fFE_uCc3lkd00zOKnfYHMRu3k
    • http://localhost:8090/modules/$(VirtoCommerce.Core)/dist/app.js?v=G9gt-KeOnZtZ8Ty5A5n4v1gov4_gG1kkdOxyPr2SOhQ
    • http://localhost:8090/modules/$(VirtoCommerce.Notifications)/dist/app.js?v=3r4S_uT70ywpW4MDsbuhKP9iAOjHx8ViNpikZWmMgNg
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/dist/app.js?v=bCvrJ2mDaAhRQekXTjMgUQ7c1COKWG0Ka6Qkwu-y9Hc
    • http://localhost:8090/dist/vendor.js?v=yfUOaxxk9-ATFjmDt1fFE_uCc3lkd00zOKnfYHMRu3k
    • http://localhost:8090/modules/$(VirtoCommerce.Assets)/dist/app.js?v=DJjcTONCVxUVirP6reXh_RmnQ9T1vxlKe1v4OKwDUQQ
    • ..
  • Base64 Disclosure [10094] total: 11:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/dist/style.css?v=C8MWGCeLwAd5cdew7kkF_jhD0APYzyWphszXnJZ-7Bw
    • http://localhost:8090/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=EMDpGYtjrmIOnjRTofF4XNnlwl_fhxNtbQgD-ZZgg4A
    • http://localhost:8090/modules/$(VirtoCommerce.Content)/dist/style.css?v=hi6GOxxdbfalx1EwI4zUAXCQlDVoig3i0xcfJ74ZqKQ
    • ..
  • Modern Web Application [10109] total: 5:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/dist/app.js?v=bCvrJ2mDaAhRQekXTjMgUQ7c1COKWG0Ka6Qkwu-y9Hc
    • http://localhost:8090/dist/vendor.js?v=yfUOaxxk9-ATFjmDt1fFE_uCc3lkd00zOKnfYHMRu3k
    • http://localhost:8090/modules/$(VirtoCommerce.Core)/dist/app.js?v=G9gt-KeOnZtZ8Ty5A5n4v1gov4_gG1kkdOxyPr2SOhQ
  • Storable and Cacheable Content [10049] total: 11:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/dist/style.css?v=C8MWGCeLwAd5cdew7kkF_jhD0APYzyWphszXnJZ-7Bw
    • http://localhost:8090/favicon.ico
    • http://localhost:8090/modules/$(VirtoCommerce.Core)/dist/style.css?v=tr9c88O5met9q0Lcf4Eaxed3GIfCzqqPCQk2v8QU2iY
    • ..

View the following link to download the report.
RunnerID:3179792796