ZAP Scan Baseline Report

[github-actions]

• Site: http://localhost:8090
  New Alerts
  • CSP: Wildcard Directive [10055] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • CSP: script-src unsafe-inline [10055] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • CSP: style-src unsafe-inline [10055] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • Sub Resource Integrity Attribute Missing [90003] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • Dangerous JS Functions [10110] total: 3:
    • http://localhost:8090/dist/app.js?v=kQoArn7vGfeSIJk7k_o-d5xnrUc_5Pc0jBQdKPLZcaM
    • http://localhost:8090/dist/vendor.js?v=CrgXH2EvizBu-H2lezNUn_MMVPmmzwrPvCcvlbUoFiQ
    • http://localhost:8090/modules/$(VirtoCommerce.Notifications)/dist/app.js?v=Gx54drFiY-ENv-Be4qH5jfR-YiymsQdgVlCIOfmDKjM
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/modules/$(VirtoCommerce.Assets)/dist/app.js?v=CUBQus5NuARE0JP9znNYzikAV0QOTQ4YnR6yXdr2o5w
    • http://localhost:8090/modules/$(VirtoCommerce.Core)/dist/app.js?v=GMMit6HpV34jawzXX2RVzs2TJBmYycnES02Q3UrXbJk
    • http://localhost:8090/modules/$(VirtoCommerce.Customer)/dist/app.js?v=87SHBUD70_8wjkNVEOFdY0vSgEn7W5qV0sWUx2uq2Yc
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • http://localhost:8090/modules/$(VirtoCommerce.Notifications)/dist/app.js?v=Gx54drFiY-ENv-Be4qH5jfR-YiymsQdgVlCIOfmDKjM
  • Base64 Disclosure [10094] total: 5:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/dist/app.js?v=kQoArn7vGfeSIJk7k_o-d5xnrUc_5Pc0jBQdKPLZcaM
    • http://localhost:8090/dist/style.css?v=19aI3nZRKqFlT4usR-l7IWUTD7_9V6PZCrAF_YApFO8
    • http://localhost:8090/dist/vendor.js?v=CrgXH2EvizBu-H2lezNUn_MMVPmmzwrPvCcvlbUoFiQ
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/modules/$(VirtoCommerce.Assets)/dist/app.js?v=CUBQus5NuARE0JP9znNYzikAV0QOTQ4YnR6yXdr2o5w
    • http://localhost:8090/modules/$(VirtoCommerce.Catalog)/dist/app.js?v=Y1EbVKhuLnESdKFV0nDLdZY8peF4joNz55ZMS72q2aA
    • http://localhost:8090/modules/$(VirtoCommerce.Core)/dist/app.js?v=GMMit6HpV34jawzXX2RVzs2TJBmYycnES02Q3UrXbJk
    • ..
  • Modern Web Application [10109] total: 2:
    • http://localhost:8090
    • http://localhost:8090/
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:8090/modules/$(VirtoCommerce.Notifications)/dist/style.css?v=NiMT1OBU4f14f7w-iUssODajeg86tBrSZf0FRev3dpo
    • http://localhost:8090/robots.txt
    • http://localhost:8090/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:8090/modules/$(VirtoCommerce.Notifications)/dist/style.css?v=NiMT1OBU4f14f7w-iUssODajeg86tBrSZf0FRev3dpo
    • http://localhost:8090/robots.txt
    • http://localhost:8090/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:8090/modules/$(VirtoCommerce.Notifications)/dist/style.css?v=NiMT1OBU4f14f7w-iUssODajeg86tBrSZf0FRev3dpo
    • http://localhost:8090/robots.txt
    • http://localhost:8090/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:8090/modules/$(VirtoCommerce.Notifications)/dist/style.css?v=NiMT1OBU4f14f7w-iUssODajeg86tBrSZf0FRev3dpo
    • http://localhost:8090/robots.txt
    • http://localhost:8090/sitemap.xml
  • Storable and Cacheable Content [10049] total: 12:
    • http://localhost:8090
    • http://localhost:8090/
    • http://localhost:8090/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • http://localhost:8090/modules/$(VirtoCommerce.Content)/dist/style.css?v=W-ZSCF_AdUts-t2_DjAEWtDegp-FsKjC4ncgpOuB07Y
    • http://localhost:8090/modules/$(VirtoCommerce.Core)/dist/style.css?v=JxV59GTG-OlnR0vCng7qmL0bUL_hI5YdQOSjYMpqEsw
    • ..

View the following link to download the report.
RunnerID:9396845863

---

ZAP is supported by the Crash Override Open Source Fellowship

[mvktsk]

Task https://virtocommerce.atlassian.net/browse/VP-8590 has been created