ZAP Scan Baseline Report

[github-actions]

• Site: https://stackerbuild.io
  New Alerts
  • CSP: Wildcard Directive [10055] total: 4:
    • https://stackerbuild.io
    • https://stackerbuild.io/
    • https://stackerbuild.io/robots.txt
    • https://stackerbuild.io/sitemap.xml
  • CSP: style-src unsafe-inline [10055] total: 4:
    • https://stackerbuild.io
    • https://stackerbuild.io/
    • https://stackerbuild.io/robots.txt
    • https://stackerbuild.io/sitemap.xml
  • Permissions Policy Header Not Set [10063] total: 4:
    • https://stackerbuild.io
    • https://stackerbuild.io/
    • https://stackerbuild.io/robots.txt
    • https://stackerbuild.io/sitemap.xml
  • Strict-Transport-Security Header Not Set [10035] total: 4:
    • https://stackerbuild.io
    • https://stackerbuild.io/
    • https://stackerbuild.io/robots.txt
    • https://stackerbuild.io/sitemap.xml
  • Base64 Disclosure [10094] total: 4:
    • https://stackerbuild.io
    • https://stackerbuild.io/
    • https://stackerbuild.io/robots.txt
    • https://stackerbuild.io/sitemap.xml
  • Retrieved from Cache [10050] total: 5:
    • https://stackerbuild.io
    • https://stackerbuild.io
    • https://stackerbuild.io/
    • https://stackerbuild.io/robots.txt
    • https://stackerbuild.io/sitemap.xml
  • Storable and Cacheable Content [10049] total: 4:
    • https://stackerbuild.io
    • https://stackerbuild.io/
    • https://stackerbuild.io/robots.txt
    • https://stackerbuild.io/sitemap.xml

View the following link to download the report.
RunnerID:3247336240

[github-actions]

• Site: https://stackerbuild.io
  New Alerts

  • Absence of Anti-CSRF Tokens [10202] total: 10:
    • https://stackerbuild.io
    • https://stackerbuild.io
    • https://stackerbuild.io/
    • https://stackerbuild.io/
    • https://stackerbuild.io/installation/
    • ..
  • Content Security Policy (CSP) Header Not Set [10038] total: 11:
    • https://stackerbuild.io
    • https://stackerbuild.io/
    • https://stackerbuild.io/?__palette=on
    • https://stackerbuild.io/?query=ZAP
    • https://stackerbuild.io/hacking/
    • ..
  • Cross-Domain Misconfiguration [10098] total: 11:
    • https://stackerbuild.io
    • https://stackerbuild.io/
    • https://stackerbuild.io/hacking/
    • https://stackerbuild.io/installation/
    • https://stackerbuild.io/robots.txt
    • ..
  • Missing Anti-clickjacking Header [10020] total: 11:
    • https://stackerbuild.io
    • https://stackerbuild.io/
    • https://stackerbuild.io/?__palette=on
    • https://stackerbuild.io/?query=ZAP
    • https://stackerbuild.io/hacking/
    • ..
  • Sub Resource Integrity Attribute Missing [90003] total: 10:
    • https://stackerbuild.io
    • https://stackerbuild.io
    • https://stackerbuild.io/
    • https://stackerbuild.io/
    • https://stackerbuild.io/installation/
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • https://stackerbuild.io
    • https://stackerbuild.io/
    • https://stackerbuild.io/hacking/
    • https://stackerbuild.io/installation/
    • https://stackerbuild.io/runtime/
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 13:
    • https://stackerbuild.io
    • https://stackerbuild.io/
    • https://stackerbuild.io/assets/javascripts/bundle.078830c0.min.js
    • https://stackerbuild.io/assets/javascripts/bundle.078830c0.min.js
    • https://stackerbuild.io/assets/javascripts/bundle.078830c0.min.js
    • ..
  • Modern Web Application [10109] total: 11:
    • https://stackerbuild.io
    • https://stackerbuild.io/
    • https://stackerbuild.io/?__palette=on
    • https://stackerbuild.io/?query=ZAP
    • https://stackerbuild.io/hacking/
    • ..
  • Re-examine Cache-control Directives [10015] total: 11:
    • https://stackerbuild.io
    • https://stackerbuild.io/
    • https://stackerbuild.io/?__palette=on
    • https://stackerbuild.io/?query=ZAP
    • https://stackerbuild.io/hacking/
    • ..

  Resolved Alerts

  • CSP: Wildcard Directive [10055] total: 4:
  • CSP: style-src unsafe-inline [10055] total: 4:
  • Strict-Transport-Security Header Not Set [10035] total: 4:

View the following link to download the report.
RunnerID:3251736420