ZAP Scan Baseline Report

Aperta

#1 aperta il 8/2/2022 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub

Nessuno ha ancora preso questa issue.

Valutazione

Difficoltà: 5/5
Tempo stimato: Più di una settimana
Idoneità per principianti: 15/100

Tipo di issue: Bug
Chiarezza: Da chiarire
Stato di attività: Ferma
Stack tecnologico: github-actions
Ambito: ci-cd, security

Direzione di ricerca

Non vengono indicati file sorgente, test o punti di ingresso. Inizia scaricando il report ZAP dall’esecuzione di GitHub Actions collegata e analizza gli avvisi elencati; l’issue non definisce quali risultati affrontare né come dovrebbe essere il completamento.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Descrizione

Site: https://www.zaproxy.org
New Alerts
- PII Disclosure [10062] total: 1:
  - https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/
- Application Error Disclosure [90022] total: 6:
  - https://www.zaproxy.org/docs/desktop/addons/graphql-support/options/
  - https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/
  - https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/
  - https://www.zaproxy.org/docs/desktop/start/features/custompages/
  - https://www.zaproxy.org/docs/desktop/ui/dialogs/session/contexts/
  - ..
- Content Security Policy (CSP) Header Not Set [10038] total: 11:
  - https://www.zaproxy.org
  - https://www.zaproxy.org/
  - https://www.zaproxy.org/blog/
  - https://www.zaproxy.org/community/
  - https://www.zaproxy.org/docs/
  - ..
- Cross-Domain Misconfiguration [10098] total: 12:
  - https://www.zaproxy.org/blog/2021-12-14-log4shell-detection-with-zap/images/log4shell-zap_huaf5835b4bb85db2c5abb87d88fe28576_142518_300x300_fill_box_smart1_3.png
  - https://www.zaproxy.org/blog/index.xml
  - https://www.zaproxy.org/img/favicon.ico
  - https://www.zaproxy.org/img/search.svg
  - https://www.zaproxy.org/img/zapcon/08%20March%202022.svg
  - ..
- Source Code Disclosure - SQL [10099] total: 8:
  - https://www.zaproxy.org/docs/api/
  - https://www.zaproxy.org/docs/desktop/addons/ajax-spider/scandialog/
  - https://www.zaproxy.org/docs/desktop/addons/quick-start/
  - https://www.zaproxy.org/docs/desktop/addons/report-generation/
  - https://www.zaproxy.org/docs/desktop/addons/retest/
  - ..
- Sub Resource Integrity Attribute Missing [90003] total: 8:
  - https://www.zaproxy.org
  - https://www.zaproxy.org
  - https://www.zaproxy.org
  - https://www.zaproxy.org
  - https://www.zaproxy.org/robots.txt
  - ..
- Absence of Anti-CSRF Tokens [10202] total: 11:
  - https://www.zaproxy.org
  - https://www.zaproxy.org/
  - https://www.zaproxy.org/blog/
  - https://www.zaproxy.org/community/
  - https://www.zaproxy.org/docs/
  - ..
- Cross-Domain JavaScript Source File Inclusion [10017] total: 10:
  - https://www.zaproxy.org
  - https://www.zaproxy.org
  - https://www.zaproxy.org/
  - https://www.zaproxy.org/
  - https://www.zaproxy.org/blog/
  - ..
- Dangerous JS Functions [10110] total: 1:
  - https://www.zaproxy.org/main.08cf90.js
- Information Disclosure - Debug Error Messages [10023] total: 4:
  - https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/
  - https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/
  - https://www.zaproxy.org/docs/desktop/start/features/custompages/
  - https://www.zaproxy.org/docs/desktop/ui/dialogs/session/contexts/
- Permissions Policy Header Not Set [10063] total: 11:
  - https://www.zaproxy.org
  - https://www.zaproxy.org/
  - https://www.zaproxy.org/blog/
  - https://www.zaproxy.org/community/
  - https://www.zaproxy.org/docs/
  - ..
- Private IP Disclosure [2] total: 5:
  - https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/
  - https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/
  - https://www.zaproxy.org/docs/desktop/ui/dialogs/options/localproxy/
  - https://www.zaproxy.org/docs/docker/about/
  - https://www.zaproxy.org/index.xml
- Strict-Transport-Security Header Not Set [10035] total: 12:
  - https://www.zaproxy.org/blog/2021-12-14-log4shell-detection-with-zap/images/log4shell-zap_huaf5835b4bb85db2c5abb87d88fe28576_142518_300x300_fill_box_smart1_3.png
  - https://www.zaproxy.org/blog/index.xml
  - https://www.zaproxy.org/img/favicon.ico
  - https://www.zaproxy.org/img/search.svg
  - https://www.zaproxy.org/img/zapcon/08%20March%202022.svg
  - ..
- Timestamp Disclosure - Unix [10096] total: 5:
  - https://www.zaproxy.org
  - https://www.zaproxy.org/
  - https://www.zaproxy.org/blog/
  - https://www.zaproxy.org/robots.txt
  - https://www.zaproxy.org/videos/
- X-Content-Type-Options Header Missing [10021] total: 12:
  - https://www.zaproxy.org/blog/2021-12-14-log4shell-detection-with-zap/images/log4shell-zap_huaf5835b4bb85db2c5abb87d88fe28576_142518_300x300_fill_box_smart1_3.png
  - https://www.zaproxy.org/blog/index.xml
  - https://www.zaproxy.org/img/favicon.ico
  - https://www.zaproxy.org/img/search.svg
  - https://www.zaproxy.org/img/zapcon/08%20March%202022.svg
  - ..
- Base64 Disclosure [10094] total: 12:
  - https://www.zaproxy.org
  - https://www.zaproxy.org
  - https://www.zaproxy.org/
  - https://www.zaproxy.org/blog/
  - https://www.zaproxy.org/community/
  - ..
- Content-Type Header Missing [10019] total: 2:
  - https://www.zaproxy.org/blog/2020-08-28-introducing-the-graphql-add-on-for-zap/
  - https://www.zaproxy.org/tags/graphql/index.xml
- Information Disclosure - Suspicious Comments [10027] total: 3:
  - https://www.zaproxy.org/faq/
  - https://www.zaproxy.org/main.08cf90.js
  - https://www.zaproxy.org/search/?q=ZAP
- Modern Web Application [10109] total: 11:
  - https://www.zaproxy.org
  - https://www.zaproxy.org/
  - https://www.zaproxy.org/blog/
  - https://www.zaproxy.org/community/
  - https://www.zaproxy.org/docs/
  - ..
- Retrieved from Cache [10050] total: 11:
  - https://www.zaproxy.org
  - https://www.zaproxy.org/
  - https://www.zaproxy.org/blog/
  - https://www.zaproxy.org/community/
  - https://www.zaproxy.org/docs/
  - ..
- Storable and Cacheable Content [10049] total: 11:
  - https://www.zaproxy.org
  - https://www.zaproxy.org/
  - https://www.zaproxy.org/blog/
  - https://www.zaproxy.org/community/
  - https://www.zaproxy.org/docs/
  - ..
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 8:
  - https://www.zaproxy.org/search/?q=ZAP
  - https://www.zaproxy.org/search/?q=ZAP
  - https://www.zaproxy.org/search/?q=ZAP
  - https://www.zaproxy.org/search/?q=ZAP
  - https://www.zaproxy.org/search/?q=ZAP
  - ..
Ignored Alerts
- Incomplete or No Cache-control Header Set [10015] total: 11:

View the following link to download the report.
RunnerID:1811855047

Lingua principale: TypeScript
Stelle: 0
Fork: 0
Metriche di merge delle PR: Nessuna PR unita negli ultimi 30g

Preparare l'ambiente

Questo progetto non fornisce container di sviluppo, Dockerfile né guida per i contributori, quindi l'ambiente è a tuo carico: parti dal suo README e consulta la nostra guida al primo contributo per i passaggi generali.

Come iniziare

Leggi tutta la issue e poi la guida ai contributi del progetto.
Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
Fai un fork del repository e lavora su un branch.
Apri una pull request che faccia riferimento al numero della issue.

Issue simili

Sheet (native): content mounts twice on first open and remounts when dragging is toggled (null pan gesture swaps the parent)
Aperta
- Qualcosa non va?
Difficoltà 2/5 1-3 ore Idoneità per principianti 74/100

tamagui/tamagui#4356 · Aperta il 19/10/2026

I maintainer di solito rispondono entro 1 giorno
Pet submission: Sleepwing / 眠翼鸟
Aperta
- Qualcosa non va?
Difficoltà 2/5 1-3 ore Idoneità per principianti 65/100

OpenPetsHQ/openpets#273 · Aperta il 19/10/2026

I maintainer di solito rispondono entro 1 giorno
[perf] src/features: sequential mermaid rendering in PDF export preprocess
Aperta
- Qualcosa non va?
Difficoltà 2/5 1-3 ore Idoneità per principianti 76/100

fritzprix/libr-agent#2161 · Aperta il 19/10/2026

I maintainer di solito rispondono entro 1 giorno
macOS: clicking a menu item that has a submenu closes the menu instead of opening the submenu
Aperta
- Qualcosa non va?
Difficoltà 2/5 1-3 ore Idoneità per principianti 83/100

blackboardsh/electrobun#581 · Aperta il 19/10/2026
fix(ci): pass VITE_SENTRY_DSN to the Cloudflare frontend deploy
Aperta
- Qualcosa non va?
backlog-skill effort:xs frontend infra ready-for-agent

Difficoltà 2/5 1-3 ore Idoneità per principianti 74/100

LucasSantana-Dev/Lucky#2862 · Aperta il 19/10/2026

I maintainer di solito rispondono entro 1 giorno

Altre issue su TypeScript

ZAP Scan Baseline Report

Qualcosa non va?

Valutazione

Direzione di ricerca

Descrizione

Preparare l'ambiente

Come iniziare

Issue simili

Qualcosa non va?

Qualcosa non va?

Qualcosa non va?

Qualcosa non va?

Qualcosa non va?

Ricevi le nuove issue nella tua casella