ZAP Scan Baseline Report #144
Description
- Site: https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com
New Alerts- Content Security Policy (CSP) Header Not Set [10038] total: 2:
- Missing Anti-clickjacking Header [10020] total: 2:
- Dangerous JS Functions [10110] total: 2:
- Permissions Policy Header Not Set [10063] total: 8:
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-bundle.js
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-init.js
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-standalone-preset.js
- ..
- Strict-Transport-Security Header Not Set [10035] total: 11:
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-16x16.png
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-32x32.png
- ..
- Timestamp Disclosure - Unix [10096] total: 35:
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-standalone-preset.js
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-standalone-preset.js
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-standalone-preset.js
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-standalone-preset.js
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-standalone-preset.js
- ..
- X-Content-Type-Options Header Missing [10021] total: 11:
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-16x16.png
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-32x32.png
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-init.js
- ..
- Information Disclosure - Suspicious Comments [10027] total: 6:
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-bundle.js
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-init.js
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/swagger-ui-standalone-preset.js
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-bundle.js
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-init.js
- ..
- Modern Web Application [10109] total: 2:
- Re-examine Cache-control Directives [10015] total: 2:
- Storable and Cacheable Content [10049] total: 6:
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui-init.js
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/robots.txt
- ..
- Storable but Non-Cacheable Content [10049] total: 4:
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-16x16.png
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/api/favicon-32x32.png
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/favicon-32x32.png
- https://ee1uqiu7x1.execute-api.ca-central-1.amazonaws.com/api/swagger-ui.css
View the following link to download the report.
RunnerID:5271057857