ZAP Security Report: backend
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 25/100
- Issue type
- Bug
- Clarity
- Needs clarification
- Activity status
- Stale
- Tech stack
- typescript
Research direction
Download the ZAP report from the linked GitHub Actions run and inspect the findings for the site root, /api, /robots.txt, and /sitemap.xml. Trace how these endpoints are served, then verify that the reported security headers are present in responses and rerun the ZAP scan to confirm the alerts are resolved.
Written by the indexing model from the issue text.
Description
- Site: https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca
New Alerts- Content Security Policy (CSP) Header Not Set [10038] total: 4:
- Permissions Policy Header Not Set [10063] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 4:
- Non-Storable Content [10049] total: 4:
View the following link to download the report.
RunnerID:20393468159
- Dominant language
- TypeScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Getting set up
- Ships a Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from bcgov/tryquickstart
-
Difficulty 4/5 3-5 days Newbie friendliness 40/100
bcgov/tryquickstart#34 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 38/100
bcgov/tryquickstart#33 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
bcgov/tryquickstart#29 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
bcgov/tryquickstart#25 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
bcgov/tryquickstart#22 ·
All issues in bcgov/tryquickstart
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
Maintainers usually reply within 1 day
-
📕documentation
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
db-ux-design-system/core-web#8343 ·
Maintainers usually reply within 1 day
-
enhancement triage/needs-triage
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
heygen-com/hyperframes#4944 ·
Maintainers usually reply within 1 day
-
ai-driven-qa bug claude
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
linagora/twake-calendar-frontend#1493 · 1 comment ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
material-extensions/vscode-material-icon-theme#3610 ·
Maintainers usually reply within 2 days