ZAP Full Scan Report

[github-actions]

• Site: http://localhost:4321
  New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 12:
    • http://localhost:4321/en
    • http://localhost:4321/en
    • http://localhost:4321/en?page=0
    • http://localhost:4321/en?page=0
    • http://localhost:4321/en?page=1
    • ..
  • Anti-CSRF Tokens Check [20012] total: 16:
    • http://localhost:4321/en
    • http://localhost:4321/en
    • http://localhost:4321/en?CANADA_DENTAL_BENEFIT=on&CANADA_PENSION_PLAN=on&EMPLOYMENT_INSURANCE=on&GUARANTEED_INCOME_SUPPLEMENT=on&GUARANTEED_INCOME_SUPPLEMENTtttt=on&OLD_AGE_SECURITY=on&page=3&search=ZAP
    • http://localhost:4321/en?CANADA_DENTAL_BENEFIT=on&CANADA_PENSION_PLAN=on&EMPLOYMENT_INSURANCE=on&GUARANTEED_INCOME_SUPPLEMENT=on&GUARANTEED_INCOME_SUPPLEMENTtttt=on&OLD_AGE_SECURITY=on&page=3&search=ZAP
    • http://localhost:4321/en?CANADA_DENTAL_BENEFIT=on&CANADA_PENSION_PLAN=on&EMPLOYMENT_INSURANCE=on&GUARANTEED_INCOME_SUPPLEMENT=on&GUARANTEED_INCOME_SUPPLEMENTtttt=on&OLD_AGE_SECURITY=on&search=ZAP
    • ..
  • Content Security Policy (CSP) Header Not Set [10038] total: 11:
    • http://localhost:4321
    • http://localhost:4321/
    • http://localhost:4321/en
    • http://localhost:4321/en?page=0
    • http://localhost:4321/en?page=1
    • ..
  • Missing Anti-clickjacking Header [10020] total: 11:
    • http://localhost:4321
    • http://localhost:4321/
    • http://localhost:4321/en
    • http://localhost:4321/en?page=0
    • http://localhost:4321/en?page=1
    • ..
  • Permissions Policy Header Not Set [10063] total: 11:
    • http://localhost:4321
    • http://localhost:4321/
    • http://localhost:4321/en
    • http://localhost:4321/en?page=0
    • http://localhost:4321/en?page=1
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • http://localhost:4321
    • http://localhost:4321/
    • http://localhost:4321/_astro/index.5ab926d5.css
    • http://localhost:4321/en
    • http://localhost:4321/en?page=0
    • ..
  • Modern Web Application [10109] total: 12:
    • http://localhost:4321/en
    • http://localhost:4321/en?CANADA_DENTAL_BENEFIT=on&CANADA_PENSION_PLAN=on&EMPLOYMENT_INSURANCE=on&GUARANTEED_INCOME_SUPPLEMENT=on&GUARANTEED_INCOME_SUPPLEMENTtttt=on&OLD_AGE_SECURITY=on&search=ZAP
    • http://localhost:4321/en?page=0
    • http://localhost:4321/en?page=1
    • http://localhost:4321/en?page=2
    • ..
  • Storable and Cacheable Content [10049] total: 7:
    • http://localhost:4321
    • http://localhost:4321/
    • http://localhost:4321/en
    • http://localhost:4321/en?page=0
    • http://localhost:4321/fr
    • ..
  • Storable but Non-Cacheable Content [10049] total: 4:
    • http://localhost:4321/_astro/index.5ab926d5.css
    • http://localhost:4321/favicon.ico
    • http://localhost:4321/goc.svg
    • http://localhost:4321/wmms-blk.svg
  • User Agent Fuzzer [10104] total: 12:
    • http://localhost:4321/_astro
    • http://localhost:4321/_astro
    • http://localhost:4321/_astro
    • http://localhost:4321/_astro
    • http://localhost:4321/_astro
    • ..

View the following link to download the report.
RunnerID:6564083931

[github-actions]

• Site: http://localhost:4321
  New Alerts
  • SQL Injection [40018] total: 1:
    • http://localhost:4321/fr?CANADA_DENTAL_BENEFIT=on&CANADA_PENSION_PLAN=on&EMPLOYMENT_INSURANCE=on&GUARANTEED_INCOME_SUPPLEMENT=on&GUARANTEED_INCOME_SUPPLEMENTtttt=on&OLD_AGE_SECURITY=on&page=4-2&search=ZAP&searchMobile=ZAP

View the following link to download the report.
RunnerID:6574402737

[github-actions]

• Site: http://localhost:4321
  New Alerts

  • Information Disclosure - Debug Error Messages [10023] total: 2:
    • http://localhost:4321/en
    • http://localhost:4321/fr

  Resolved Alerts

  • SQL Injection [40018] total: 1:
  • Absence of Anti-CSRF Tokens [10202] total: 14:
  • Anti-CSRF Tokens Check [20012] total: 32:
  • Modern Web Application [10109] total: 12:

View the following link to download the report.
RunnerID:6578479291

[github-actions]

• Site: http://localhost:4321
  New Alerts

  • SQL Injection [40018] total: 3:
    • http://localhost:4321/en?CANADA_DENTAL_BENEFIT=on&EMPLOYMENT_INSURANCE=on&GROCERY_REBATE=on&GUARANTEED_INCOME_SUPPLEMENT=on&OLD_AGE_SECURITY=on&SERVICE_DISRUPTIONS=on&page=4-2&search=ZAP
    • http://localhost:4321/fr?CANADA_DENTAL_BENEFIT=on&EMPLOYMENT_INSURANCE=on&GROCERY_REBATE=on&GUARANTEED_INCOME_SUPPLEMENT=on&OLD_AGE_SECURITY=on&SERVICE_DISRUPTIONS=on&page=4-2&search=ZAP
    • http://localhost:4321/fr?CANADA_DENTAL_BENEFIT=on&EMPLOYMENT_INSURANCE=on&GROCERY_REBATE=on&GUARANTEED_INCOME_SUPPLEMENT=on&OLD_AGE_SECURITY=on&SERVICE_DISRUPTIONS=on&page=4-2&search=ZAP&searchMobile=ZAP
  • Absence of Anti-CSRF Tokens [10202] total: 12:
    • http://localhost:4321/en
    • http://localhost:4321/en
    • http://localhost:4321/en?page=0
    • http://localhost:4321/en?page=0
    • http://localhost:4321/fr
    • ..
  • Anti-CSRF Tokens Check [20012] total: 32:
    • http://localhost:4321/en
    • http://localhost:4321/en
    • http://localhost:4321/en?CANADA_DENTAL_BENEFIT=on&EMPLOYMENT_INSURANCE=on&GROCERY_REBATE=on&GUARANTEED_INCOME_SUPPLEMENT=on&OLD_AGE_SECURITY=on&SERVICE_DISRUPTIONS=on&page=1&search=ZAP&searchMobile=ZAP
    • http://localhost:4321/en?CANADA_DENTAL_BENEFIT=on&EMPLOYMENT_INSURANCE=on&GROCERY_REBATE=on&GUARANTEED_INCOME_SUPPLEMENT=on&OLD_AGE_SECURITY=on&SERVICE_DISRUPTIONS=on&page=1&search=ZAP&searchMobile=ZAP
    • http://localhost:4321/en?CANADA_DENTAL_BENEFIT=on&EMPLOYMENT_INSURANCE=on&GROCERY_REBATE=on&GUARANTEED_INCOME_SUPPLEMENT=on&OLD_AGE_SECURITY=on&SERVICE_DISRUPTIONS=on&page=2&search=ZAP
    • ..
  • Modern Web Application [10109] total: 12:
    • http://localhost:4321/en
    • http://localhost:4321/en?CANADA_DENTAL_BENEFIT=on&EMPLOYMENT_INSURANCE=on&GROCERY_REBATE=on&GUARANTEED_INCOME_SUPPLEMENT=on&OLD_AGE_SECURITY=on&SERVICE_DISRUPTIONS=on&search=ZAP
    • http://localhost:4321/en?page=0
    • http://localhost:4321/en?page=1
    • http://localhost:4321/en?page=2
    • ..

  Resolved Alerts

  • Information Disclosure - Debug Error Messages [10023] total: 2:

View the following link to download the report.
RunnerID:6588298799

[github-actions]

• Site: http://localhost:4321
  New Alerts
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 6:
    • http://localhost:4321/en?cb0=1&cb1=1&cb2=1&cb3=1&cb4=1&cb5=1&page=0&search=ZAP
    • http://localhost:4321/en?cb0=1&cb1=1&cb2=1&cb3=1&cb4=1&cb5=1&page=1&search=ZAP
    • http://localhost:4321/en?cb0=1&cb1=1&cb2=1&cb3=1&cb4=1&cb5=1&search=ZAP
    • http://localhost:4321/fr?cb0=1&cb1=1&cb2=1&cb3=1&cb4=1&cb5=1&page=0&search=ZAP
    • http://localhost:4321/fr?cb0=1&cb1=1&cb2=1&cb3=1&cb4=1&cb5=1&page=2&search=ZAP
    • ..

View the following link to download the report.
RunnerID:6654237768

[github-actions]

• Site: http://localhost:4321
  Resolved Alerts
  • SQL Injection [40018] total: 1:

View the following link to download the report.
RunnerID:7047940725

[github-actions]

• Site: http://localhost:4321
  New Alerts
  • Information Disclosure - Suspicious Comments [10027] total: 1:
    • http://localhost:4321/_astro/hoisted.bee06021.js

View the following link to download the report.
RunnerID:7049566420

[github-actions]

• Site: http://localhost:4321
  New Alerts
  • SQL Injection [40018] total: 1:
    • http://localhost:4321/en?cb0=1&cb1=1&cb2=1&cb3=1&cb4=1&cb5=1&page=4-2&search=ZAP

View the following link to download the report.
RunnerID:7061061985

[github-actions]

• Site: http://localhost:4321
  Resolved Alerts
  • SQL Injection [40018] total: 1:

View the following link to download the report.
RunnerID:7064498634

[github-actions]

• Site: http://localhost:4321
  New Alerts
  • SQL Injection [40018] total: 1:
    • http://localhost:4321/fr?cb0=1&cb1=1&cb2=1&cb3=1&cb4=1&cb5=1&page=4-2&search=ZAP

View the following link to download the report.
RunnerID:7090187645

[github-actions]

• Site: http://localhost:4321
  Resolved Alerts
  • SQL Injection [40018] total: 1:

View the following link to download the report.
RunnerID:7140937697

[github-actions]

• Site: http://localhost:4321
  New Alerts
  • SQL Injection [40018] total: 2:
    • http://localhost:4321/en?cb0=1&cb1=1&cb2=1&cb3=1&cb4=1&cb5=1&page=4-2&search=ZAP
    • http://localhost:4321/fr?cb0=1&cb1=1&cb2=1&cb3=1&cb4=1&cb5=1&page=4-2&search=ZAP

View the following link to download the report.
RunnerID:7209724409

[github-actions]

• Site: http://localhost:4321
  Resolved Alerts
  • SQL Injection [40018] total: 2:

View the following link to download the report.
RunnerID:7249311419

[github-actions]

• Site: http://localhost:4321
  New Alerts
  • SQL Injection [40018] total: 1:
    • http://localhost:4321/en?cb0=1&cb1=1&cb2=1&cb3=1&cb4=1&cb5=1&page=4-2&search=ZAP

View the following link to download the report.
RunnerID:7288318146

[github-actions]

• Site: http://localhost:4321
  Resolved Alerts
  • SQL Injection [40018] total: 1:

View the following link to download the report.
RunnerID:7291618168

[github-actions]

• Site: http://localhost:4321
  New Alerts
  • SQL Injection [40018] total: 1:
    • http://localhost:4321/fr?cb0=1&cb1=1&cb2=1&cb3=1&cb4=1&cb5=1&page=4-2&search=ZAP

View the following link to download the report.
RunnerID:7291663669

[github-actions]

• Site: http://localhost:4321
  Resolved Alerts
  • SQL Injection [40018] total: 1:

View the following link to download the report.
RunnerID:7292186827

[github-actions]

• Site: http://localhost:4321
  New Alerts
  • SQL Injection [40018] total: 2:
    • http://localhost:4321/en?cb0=1&cb1=1&cb2=1&cb3=1&cb4=1&cb5=1&page=4-2&search=ZAP
    • http://localhost:4321/fr?cb0=1&cb1=1&cb2=1&cb3=1&cb4=1&cb5=1&page=4-2&search=ZAP

View the following link to download the report.
RunnerID:7574217336

[github-actions]

• Site: http://localhost:4321
  Resolved Alerts
  • SQL Injection [40018] total: 2:

View the following link to download the report.
RunnerID:7583818528

[github-actions]

• Site: http://localhost:4321
  New Alerts
  • SQL Injection [40018] total: 2:
    • http://localhost:4321/en?cb0=1&cb1=1&cb2=1&cb3=1&cb4=1&cb5=1&page=4-2&search=ZAP
    • http://localhost:4321/fr?cb0=1&cb1=1&cb2=1&cb3=1&cb4=1&cb5=1&page=4-2&search=ZAP

View the following link to download the report.
RunnerID:7610956681

[github-actions]

• Site: http://localhost:4321
  Resolved Alerts
  • Modern Web Application [10109] total: 12:

View the following link to download the report.
RunnerID:7696964768

[github-actions]

• Site: http://localhost:4321
  Resolved Alerts
  • SQL Injection [40018] total: 1:

View the following link to download the report.
RunnerID:7906141055

[github-actions]

• Site: http://localhost:4321
  New Alerts
  • SQL Injection [40018] total: 1:
    • http://localhost:4321/en?cb0=1&cb1=1&cb2=1&cb3=1&cb4=1&cb5=1&page=4-2&search=ZAP

View the following link to download the report.
RunnerID:8360220315