ZAP Scan Baseline Report

[github-actions]

• Site: https://hack23.github.io
  New Alerts

  • CSP: Failure to Define Directive with No Fallback [10055] total: 1:
    • https://hack23.github.io/
  • CSP: Meta Policy Invalid Directive [10055] total: 1:
    • https://hack23.github.io/game/
  • CSP: style-src unsafe-inline [10055] total: 2:
    • https://hack23.github.io/
    • https://hack23.github.io/game/
  • Cross-Domain Misconfiguration [10098] total: 5:
    • https://hack23.github.io/game/
    • https://hack23.github.io/game/assets/index-CcoJO2zd.js
    • https://hack23.github.io/game/assets/index-Dqftxp05.css
    • https://hack23.github.io/game/assets/rolldown-runtime-S-ySWqyJ.js
    • https://hack23.github.io/game/vite.svg
  • Missing Anti-clickjacking Header [10020] total: 1:
    • https://hack23.github.io/game/
  • X-Frame-Options Defined via META (Non-compliant with Spec) [10020] total: 1:
    • https://hack23.github.io/game/
  • Cross-Origin-Embedder-Policy Header Missing or Invalid [90004] total: 1:
    • https://hack23.github.io/game/
  • Cross-Origin-Opener-Policy Header Missing or Invalid [90004] total: 1:
    • https://hack23.github.io/game/
  • Permissions Policy Header Not Set [10063] total: 5:
    • https://hack23.github.io/
    • https://hack23.github.io/game/
    • https://hack23.github.io/game/assets/rolldown-runtime-S-ySWqyJ.js
    • https://hack23.github.io/robots.txt
    • https://hack23.github.io/sitemap.xml
  • Strict-Transport-Security Header Not Set [10035] total: 5:
    • https://hack23.github.io/
    • https://hack23.github.io/game/
    • https://hack23.github.io/game/assets/rolldown-runtime-S-ySWqyJ.js
    • https://hack23.github.io/robots.txt
    • https://hack23.github.io/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 5:
    • https://hack23.github.io/game/
    • https://hack23.github.io/game/assets/index-CcoJO2zd.js
    • https://hack23.github.io/game/assets/index-Dqftxp05.css
    • https://hack23.github.io/game/assets/rolldown-runtime-S-ySWqyJ.js
    • https://hack23.github.io/game/vite.svg
  • CSP: Header & Meta [10055] total: 1:
    • https://hack23.github.io/
  • Re-examine Cache-control Directives [10015] total: 1:
    • https://hack23.github.io/game/
  • Retrieved from Cache [10050] total: 7:
    • https://hack23.github.io/
    • https://hack23.github.io/game/
    • https://hack23.github.io/
    • https://hack23.github.io/game
    • https://hack23.github.io/game/
    • ..
  • Storable and Cacheable Content [10049] total: 5:
    • https://hack23.github.io/
    • https://hack23.github.io/game
    • https://hack23.github.io/game/
    • https://hack23.github.io/game/assets/rolldown-runtime-S-ySWqyJ.js
    • https://hack23.github.io/robots.txt

  Ignored Alerts

  • Timestamp Disclosure - Unix [10096] total: 1:
  • Modern Web Application [10109] total: 1:

View the following link to download the report.
RunnerID:25655394227

---

ZAP by Checkmarx