ZAP Full Scan Report

[github-actions]

• Site: https://school-experience-app-dev.london.cloudapps.digital
  New Alerts
  • CSP: Wildcard Directive [10055] total: 5:
    • https://school-experience-app-dev.london.cloudapps.digital
    • https://school-experience-app-dev.london.cloudapps.digital/
    • https://school-experience-app-dev.london.cloudapps.digital/
    • https://school-experience-app-dev.london.cloudapps.digital/robots.txt
    • https://school-experience-app-dev.london.cloudapps.digital/sitemap.xml
  • CSP: style-src unsafe-inline [10055] total: 5:
    • https://school-experience-app-dev.london.cloudapps.digital
    • https://school-experience-app-dev.london.cloudapps.digital/
    • https://school-experience-app-dev.london.cloudapps.digital/
    • https://school-experience-app-dev.london.cloudapps.digital/robots.txt
    • https://school-experience-app-dev.london.cloudapps.digital/sitemap.xml
  • Proxy Disclosure [40025] total: 3:
    • https://school-experience-app-dev.london.cloudapps.digital/
    • https://school-experience-app-dev.london.cloudapps.digital/robots.txt
    • https://school-experience-app-dev.london.cloudapps.digital/sitemap.xml
  • Cookie Slack Detector [90027] total: 1:
    • https://school-experience-app-dev.london.cloudapps.digital/
  • Cookie without SameSite Attribute [10054] total: 1:
    • https://school-experience-app-dev.london.cloudapps.digital/
  • Incomplete or No Cache-control Header Set [10015] total: 1:
    • https://school-experience-app-dev.london.cloudapps.digital/
  • Permissions Policy Header Not Set [10063] total: 4:
    • https://school-experience-app-dev.london.cloudapps.digital
    • https://school-experience-app-dev.london.cloudapps.digital/
    • https://school-experience-app-dev.london.cloudapps.digital/robots.txt
    • https://school-experience-app-dev.london.cloudapps.digital/sitemap.xml
  • Timestamp Disclosure - Unix [10096] total: 1:
    • https://school-experience-app-dev.london.cloudapps.digital/
  • Base64 Disclosure [10094] total: 1:
    • https://school-experience-app-dev.london.cloudapps.digital/
  • Modern Web Application [10109] total: 1:
    • https://school-experience-app-dev.london.cloudapps.digital/
  • Non-Storable Content [10049] total: 5:
    • https://school-experience-app-dev.london.cloudapps.digital
    • https://school-experience-app-dev.london.cloudapps.digital/
    • https://school-experience-app-dev.london.cloudapps.digital/
    • https://school-experience-app-dev.london.cloudapps.digital/robots.txt
    • https://school-experience-app-dev.london.cloudapps.digital/sitemap.xml
  • User Agent Fuzzer [10104] total: 7:
    • https://school-experience-app-dev.london.cloudapps.digital/
    • https://school-experience-app-dev.london.cloudapps.digital/
    • https://school-experience-app-dev.london.cloudapps.digital/
    • https://school-experience-app-dev.london.cloudapps.digital/
    • https://school-experience-app-dev.london.cloudapps.digital/
    • ..

View the following link to download the report.
RunnerID:1909483626

[github-actions]

• Site: https://school-experience-app-dev.london.cloudapps.digital
  Resolved Alerts
  • Cookie without SameSite Attribute [10054] total: 1:

View the following link to download the report.
RunnerID:2039296953

[github-actions]

• Site: https://school-experience-app-dev.london.cloudapps.digital
  Resolved Alerts
  • Re-examine Cache-control Directives [10015] total: 1:

View the following link to download the report.
RunnerID:2307096747

[github-actions]

• Site: https://school-experience-app-dev.london.cloudapps.digital
  New Alerts
  • Re-examine Cache-control Directives [10015] total: 1:
    • https://school-experience-app-dev.london.cloudapps.digital/

View the following link to download the report.
RunnerID:2422248426