 |
Automated Application Security Scanning - The application should not be vulnerable to XPATH injection |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Automated Application Security Scanning - The application should not expose insecure HTTP methods |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Authentication - Passwords should be case sensitive |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Authentication - Transmit authentication credentials over HTTPS |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Authentication - When authentication credentials are sent to the server, it should respond with a 3xx status code. |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Authentication - Disable browser auto-completion on the password field |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Authentication - Lock the user account out after 4 incorrect authentication attempts |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Authorisation and Access Control - Users can view restricted resources for which they are authorised - Examples - Example #1.1 |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Authorisation and Access Control - Users can view restricted resources for which they are authorised - Examples - Example #1.2 |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Authorisation and Access Control - Users can view restricted resources for which they are authorised - Examples - Example #1.3 |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Authorisation and Access Control - Users must not be able to view resources for which they are not authorised - Examples - Example #1.1 |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Authorisation and Access Control - Users must not be able to view resources for which they are not authorised - Examples - Example #1.2 |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Authorisation and Access Control - Users must not be able to view resources for which they are not authorised - Examples - Example #1.3 |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Authorisation and Access Control - Users must not be able to view resources for which they are not authorised - Examples - Example #1.4 |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Authorisation and Access Control - Un-authenticated users should not be able to view restricted resources - Examples - Example #1.1 |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Authorisation and Access Control - Un-authenticated users should not be able to view restricted resources - Examples - Example #1.2 |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Authorisation and Access Control - Un-authenticated users should not be able to view restricted resources - Examples - Example #1.3 |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Data confidentiality - Prevent browser caching of sensitive data - Examples - Example #1.1 |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Host Configuration - Only the required ports should be open - Examples - Example #1.1 |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Security settings on HTTP headers - Restrict other sites from placing it in an iframe in order to prevent ClickJacking attacks |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Security settings on HTTP headers - Enable built in browser protection again Cross Site Scriping |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Security settings on HTTP headers - Force the use of HTTPS for the base secure Url |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Security settings on HTTP headers - Restrict HTML5 Cross Domain Requests to only trusted hosts |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Security settings on HTTP headers - Enable anti-MIME sniffing prevention in browsers |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Nessus Scan - The host systems should not expose known security vulnerabilities |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Passive Application Security Scanning - The application should not contain vulnerabilities identified using passive scanning |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Session Management - Issue a new session ID after authentication |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Session Management - Invalidate the session when the user logs out |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Session Management - Invalidate the session after a period of inactivity |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Session Management - Set the 'secure' flag on the session cookie |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
Session Management - Set the 'httpOnly' flag on the session cookie |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |
 |
SSL - Support TLSv1.2 |
- |
skipped: 'cucumber.filter.tags=( ( ( not ( @wip ) and not ( @slow ) ) and not ( @broken-since-zap-2.13.0 ) ) and not ( @broken-since-zap-2.16.1 ) )' did not match this scenario |