ZAP Security Report: frontend
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 25/100
- Issue type
- Bug
- Clarity
- Needs clarification
- Activity status
- Stale
- Tech stack
- typescript
Research direction
Start with the linked GitHub Actions run and its ZAP report for the deployed frontend URL. Review the listed CSP, hidden-file, Spectre isolation, information-disclosure, and content findings, then rerun the ZAP scan to confirm the reported alerts are addressed.
Written by the indexing model from the issue text.
Description
- Site: https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca
New Alerts- CSP: style-src unsafe-inline [10055] total: 3:
- Hidden File Found [40035] total: 4:
- Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 3:
- Information Disclosure - Suspicious Comments [10027] total: 1:
- Modern Web Application [10109] total: 3:
- Non-Storable Content [10049] total: 7:
- https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/
- https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-B669E8kN.js
- https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/assets/index-QVRv6kAa.css
- https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/assets/react-DbHEDQBy.js
- https://tryquickstart-test-frontend.apps.silver.devops.gov.bc.ca/favicon.ico
- ..
View the following link to download the report.
RunnerID:15651388763
- Dominant language
- TypeScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from bcgov/tryquickstart
-
Difficulty 4/5 3-5 days Newbie friendliness 40/100
bcgov/tryquickstart#34 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 38/100
bcgov/tryquickstart#33 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
bcgov/tryquickstart#29 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
bcgov/tryquickstart#25 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 25/100
bcgov/tryquickstart#23 ·
All issues in bcgov/tryquickstart
Similar issues
-
blocklist removal
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
MetaMask/eth-phishing-detect#296544 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
pastelsky/bundlephobia#1122 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
-
category/development priority/P2 scope/file-operations scope/testing type/enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
Enatega Customer and Rider app: Add-ons price is not visible to customer after order is placed. Open
Difficulty 2/5 1-3 hours Newbie friendliness 75/100