ZAP Security Report: frontend
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 35/100
- Issue type
- Bug
- Clarity
- Needs clarification
- Activity status
- Stale
- Tech stack
- typescript
Research direction
Start with the ZAP report and inspect how the frontend at the listed site is deployed and responds to requests; the payload does not identify a repository file or test. Determine the appropriate configuration location for the reported headers, then rerun the linked ZAP report against the root, robots.txt, and sitemap.xml endpoints to confirm the findings are resolved.
Written by the indexing model from the issue text.
Description
- Site: https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca
New Alerts- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- Permissions Policy Header Not Set [10063] total: 3:
- Strict-Transport-Security Header Not Set [10035] total: 3:
- Non-Storable Content [10049] total: 3:
View the following link to download the report.
RunnerID:20393468159
- Dominant language
- TypeScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from bcgov/tryquickstart
-
Difficulty 4/5 3-5 days Newbie friendliness 40/100
bcgov/tryquickstart#34 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 38/100
bcgov/tryquickstart#33 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
bcgov/tryquickstart#29 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
bcgov/tryquickstart#25 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 25/100
bcgov/tryquickstart#23 ·
All issues in bcgov/tryquickstart
Similar issues
-
Browser Waiting for: Product Owner
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
getsentry/sentry-javascript#24577 · 1 comment ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
agilepathway/label-checker#640 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
copse-dev/agent-pane#2953 ·
-
agentic-workflows
Difficulty 1/5 Under an hour Newbie friendliness 85/100
githubnext/rig#534 ·
-
automation missing-model model-sync provider:pioneer
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
anomalyco/models.dev#7701 ·