ZAP Security Report: backend
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 25/100
- Issue type
- Bug
- Clarity
- Needs clarification
- Activity status
- Stale
- Tech stack
- typescript
Research direction
Start with the linked ZAP report and inspect how the backend serves the listed site, /api, robots.txt, and sitemap.xml endpoints. Determine where their response headers are configured. Done means the four reported alerts are addressed on all listed endpoints and the ZAP report is rerun to confirm the results.
Written by the indexing model from the issue text.
Description
- Site: https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca
New Alerts- Content Security Policy (CSP) Header Not Set [10038] total: 4:
- Permissions Policy Header Not Set [10063] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 4:
- Non-Storable Content [10049] total: 4:
View the following link to download the report.
RunnerID:17879085262
- Dominant language
- TypeScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from bcgov/tryquickstart
-
Difficulty 4/5 3-5 days Newbie friendliness 40/100
bcgov/tryquickstart#34 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 38/100
bcgov/tryquickstart#33 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
bcgov/tryquickstart#29 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
bcgov/tryquickstart#25 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 25/100
bcgov/tryquickstart#23 ·
All issues in bcgov/tryquickstart
Similar issues
-
bot:ai-assisted component:compact-js status:untriaged
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
midnightntwrk/midnight-sdk#403 ·
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
joinmarket-webui/jam#1496 · 1 comment ·
-
Tech
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
opencrvs/opencrvs-core#13865 ·
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
linagora/twake-calendar-frontend#1377 · 1 comment ·
-
Difficulty 1/5 Under an hour Newbie friendliness 72/100
EclipseFdn/open-vsx.org#13385 · 1 comment ·