ZAP Security Report: backend
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 25/100
- Issue type
- Bug
- Clarity
- Needs clarification
- Activity status
- Stale
- Tech stack
- typescript
Research direction
Start with the ZAP report from GitHub Actions run 15651388763 and inspect the reported frontend URLs, especially the /api endpoint and generated assets. Done means resolving or explicitly assessing the listed security alerts and rerunning the ZAP scan to verify the results.
Written by the indexing model from the issue text.
Description
- Site: https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca
New Alerts- CORS Misconfiguration [40040] total: 1:
- CSP: style-src unsafe-inline [10055] total: 4:
- Cross-Domain Misconfiguration [10098] total: 1:
- Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 4:
- Information Disclosure - Suspicious Comments [10027] total: 1:
- Modern Web Application [10109] total: 3:
- Non-Storable Content [10049] total: 8:
- https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/
- https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/api
- https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-B669E8kN.js
- https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-QVRv6kAa.css
- https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/assets/react-DbHEDQBy.js
- ..
View the following link to download the report.
RunnerID:15651388763
- Dominant language
- TypeScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Getting set up
- Ships a Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from bcgov/tryquickstart
-
Difficulty 4/5 3-5 days Newbie friendliness 40/100
bcgov/tryquickstart#34 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 38/100
bcgov/tryquickstart#33 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
bcgov/tryquickstart#29 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
bcgov/tryquickstart#25 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 25/100
bcgov/tryquickstart#23 ·
All issues in bcgov/tryquickstart
Similar issues
-
area/core status/need-triage
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
google-gemini/gemini-cli#29602 ·
Maintainers usually reply within 1 day
-
area: backend enhancement priority: low
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
snapotter-hq/SnapOtter#1879 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
Tencent/BrowserSkill#390 ·
Maintainers usually reply within 1 day
-
good first issue status: needs triaging type: bug version: 2.0
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
medusajs/medusa#17094 · 2 comments ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
Maintainers usually reply within 1 day