ZAP Full Scan Report

[github-actions]

• Site: https://get-school-experience-development.test.teacherservices.cloud
  New Alerts
  • CSP: Failure to Define Directive with No Fallback [10055] total: 5:
    • https://get-school-experience-development.test.teacherservices.cloud
    • https://get-school-experience-development.test.teacherservices.cloud/
    • https://get-school-experience-development.test.teacherservices.cloud/
    • https://get-school-experience-development.test.teacherservices.cloud/robots.txt
    • https://get-school-experience-development.test.teacherservices.cloud/sitemap.xml
  • CSP: style-src unsafe-inline [10055] total: 5:
    • https://get-school-experience-development.test.teacherservices.cloud
    • https://get-school-experience-development.test.teacherservices.cloud/
    • https://get-school-experience-development.test.teacherservices.cloud/
    • https://get-school-experience-development.test.teacherservices.cloud/robots.txt
    • https://get-school-experience-development.test.teacherservices.cloud/sitemap.xml
  • Cookie Slack Detector [90027] total: 1:
    • https://get-school-experience-development.test.teacherservices.cloud/
  • Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 3:
    • https://get-school-experience-development.test.teacherservices.cloud/
    • https://get-school-experience-development.test.teacherservices.cloud/
    • https://get-school-experience-development.test.teacherservices.cloud/
  • Permissions Policy Header Not Set [10063] total: 4:
    • https://get-school-experience-development.test.teacherservices.cloud
    • https://get-school-experience-development.test.teacherservices.cloud/
    • https://get-school-experience-development.test.teacherservices.cloud/robots.txt
    • https://get-school-experience-development.test.teacherservices.cloud/sitemap.xml
  • Base64 Disclosure [10094] total: 1:
    • https://get-school-experience-development.test.teacherservices.cloud/
  • Modern Web Application [10109] total: 1:
    • https://get-school-experience-development.test.teacherservices.cloud/
  • Non-Storable Content [10049] total: 4:
    • https://get-school-experience-development.test.teacherservices.cloud
    • https://get-school-experience-development.test.teacherservices.cloud/
    • https://get-school-experience-development.test.teacherservices.cloud/robots.txt
    • https://get-school-experience-development.test.teacherservices.cloud/sitemap.xml
  • Re-examine Cache-control Directives [10015] total: 1:
    • https://get-school-experience-development.test.teacherservices.cloud/
  • Sec-Fetch-Dest Header is Missing [90005] total: 4:
    • https://get-school-experience-development.test.teacherservices.cloud
    • https://get-school-experience-development.test.teacherservices.cloud/
    • https://get-school-experience-development.test.teacherservices.cloud/robots.txt
    • https://get-school-experience-development.test.teacherservices.cloud/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 4:
    • https://get-school-experience-development.test.teacherservices.cloud
    • https://get-school-experience-development.test.teacherservices.cloud/
    • https://get-school-experience-development.test.teacherservices.cloud/robots.txt
    • https://get-school-experience-development.test.teacherservices.cloud/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 4:
    • https://get-school-experience-development.test.teacherservices.cloud
    • https://get-school-experience-development.test.teacherservices.cloud/
    • https://get-school-experience-development.test.teacherservices.cloud/robots.txt
    • https://get-school-experience-development.test.teacherservices.cloud/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 4:
    • https://get-school-experience-development.test.teacherservices.cloud
    • https://get-school-experience-development.test.teacherservices.cloud/
    • https://get-school-experience-development.test.teacherservices.cloud/robots.txt
    • https://get-school-experience-development.test.teacherservices.cloud/sitemap.xml
  • Session Management Response Identified [10112] total: 1:
    • https://get-school-experience-development.test.teacherservices.cloud/
  • User Agent Fuzzer [10104] total: 12:
    • https://get-school-experience-development.test.teacherservices.cloud/
    • https://get-school-experience-development.test.teacherservices.cloud/
    • https://get-school-experience-development.test.teacherservices.cloud/
    • https://get-school-experience-development.test.teacherservices.cloud/
    • https://get-school-experience-development.test.teacherservices.cloud/
    • ..

View the following link to download the report.
RunnerID:16777788422

---

ZAP by Checkmarx