OWASP Full

Open

#14 opened on Oct 20, 2021 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 5/5
Estimated time: Over a week
Newbie friendliness: 15/100

Issue type: Bug
Clarity: Needs clarification
Activity status: Stale
Tech stack: python
Domain: security

Research direction

Start with the OWASP report linked in the issue and review the listed findings for the deployed site, including its root, robots.txt, and sitemap.xml responses. Trace those responses to the application or deployment configuration, then rerun the linked assessment to confirm that the reported headers, cookie settings, disclosure, and caching findings are addressed.

Written by the indexing model from the issue text.

Description

Site: https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com
New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- Proxy Disclosure [40025] total: 4:
- X-Frame-Options Header Not Set [10020] total: 1:
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/robots.txt
- In Page Banner Information Leak [10009] total: 2:
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/robots.txt
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/sitemap.xml
- Incomplete or No Cache-control Header Set [10015] total: 1:
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/
- Permissions Policy Header Not Set [10063] total: 3:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 3:
- Strict-Transport-Security Header Not Set [10035] total: 3:
- X-Content-Type-Options Header Missing [10021] total: 1:
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/
- Cookie Slack Detector [90027] total: 4:
- Non-Storable Content [10049] total: 2:
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/robots.txt
- Storable and Cacheable Content [10049] total: 1:
  - https://web-frontend-1test-tools.apps.cluster-61f2.61f2.sandbox1569.opentlc.com/sitemap.xml
- User Agent Fuzzer [10104] total: 6:

View the following link to download the report.
RunnerID:1365400745

Dominant language: Python
Stars: 7
Forks: 3
PR merge metrics: No merged PRs in 30d

Getting set up

This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

test_run_tests_sh's walk-up probe fails in any checkout without build/, because it forbids the skip test_version_consistency takes there
Open
- Is something wrong?
bug

Difficulty 2/5 1-3 hours Newbie friendliness 85/100

lanl/bngsim#900 · Opened Sep 30, 2026

Maintainers usually reply within 1 day
[CHORE][swarms/utils/parse_code.py][Delete the empty module]
Open
- Is something wrong?
Difficulty 1/5 Under an hour Newbie friendliness 90/100

kyegomez/swarms#2389 · Opened Sep 30, 2026

Maintainers usually reply within 1 day
https://search.utilibre.org
Open
- Is something wrong?
instance instance add

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

searxng/searx-instances#941 · 1 comment · Opened Sep 29, 2026
operating.md §14: the uninstall's list omits the journal drop-in and its revocation
Open
- Is something wrong?
Difficulty 1/5 Under an hour Newbie friendliness 92/100

FluidNumerics/fluid-walk-blocker#89 · Opened Sep 29, 2026

Maintainers usually reply within 1 day
Enhancement: clearer validation errors for `set-config --parse`.
Open
- Is something wrong?
bug

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

frappe/frappe#43604 · Opened Sep 29, 2026

Maintainers usually reply within 1 day

More Python issues

OWASP Full

Is something wrong?

Assessment

Research direction

Description

Getting set up

First steps

More from bcgov/AppAssessment

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Similar issues

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Get new issues in your inbox