Emissions Mgmt API ZAP Scan

[github-actions]

• Site: https://api.epa.gov
  New Alerts

  • A Server Error response code was returned by the server [100000] total: 2:
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/derived-hourly-value?orisCode=1.2&locationName=locationName&beginDate=beginDate&endDate=endDate
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/hourly-operating-data?orisCode=1.2&locationName=locationName&beginDate=beginDate&endDate=endDate
  • Application Error Disclosure [90022] total: 2:
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/derived-hourly-value?orisCode=1.2&locationName=locationName&beginDate=beginDate&endDate=endDate
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/hourly-operating-data?orisCode=1.2&locationName=locationName&beginDate=beginDate&endDate=endDate
  • Strict-Transport-Security Multiple Header Entries (Non-compliant with Spec) [10035] total: 12:
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/apportioned/attributes/applicable?year=1.2
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/export?monitorPlanId=monitorPlanId&year=1.2&quarter=1.2&reportedValuesOnly=true
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/hourly-operating-data?orisCode=1.2&locationName=locationName&beginDate=beginDate&endDate=endDate
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/submission-progress?submissionPeriod=2019-01-01
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/summary-values?orisCode=1.2&beginYear=1.2&beginQuarter=1.2&endYear=1.2&endQuarter=1.2
    • ..
  • A Client Error response code was returned by the server [100000] total: 34:
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/apportioned/annual/by-facility?stateCode=AL&facilityId=1.2&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&programCodeInfo=ARP&year=1.2&page=1.2&perPage=1.2
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/apportioned/annual/by-state?stateCode=AL&facilityId=1.2&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&programCodeInfo=ARP&year=1.2&page=1.2&perPage=1.2
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/apportioned/annual/nationally?stateCode=AL&facilityId=1.2&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&programCodeInfo=ARP&year=1.2&page=1.2&perPage=1.2
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/apportioned/annual?stateCode=AL&facilityId=1.2&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&programCodeInfo=ARP&year=1.2&page=1.2&perPage=1.2
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/apportioned/attributes/applicable?year=1.2
    • ..
  • Non-Storable Content [10049] total: 11:
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/export?monitorPlanId=monitorPlanId&year=1.2&quarter=1.2&reportedValuesOnly=true
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/hourly-operating-data?orisCode=1.2&locationName=locationName&beginDate=beginDate&endDate=endDate
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/submission-progress?submissionPeriod=2019-01-01
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/summary-values?orisCode=1.2&beginYear=1.2&beginQuarter=1.2&endYear=1.2&endQuarter=1.2
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/views
    • ..
  • Retrieved from Cache [10050] total: 12:
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/apportioned/attributes/applicable?year=1.2
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/export?monitorPlanId=monitorPlanId&year=1.2&quarter=1.2&reportedValuesOnly=true
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/hourly-operating-data?orisCode=1.2&locationName=locationName&beginDate=beginDate&endDate=endDate
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/submission-progress?submissionPeriod=2019-01-01
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/summary-values?orisCode=1.2&beginYear=1.2&beginQuarter=1.2&endYear=1.2&endQuarter=1.2
    • ..

• Site: https://api-easey-dev.app.cloud.gov
  New Alerts

  • Unexpected Content-Type was returned [100001] total: 4:
    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini
    • https://api-easey-dev.app.cloud.gov?aaa=bbb
    • https://api-easey-dev.app.cloud.gov?class.module.classLoader.DefaultAssertionStatus=nonsense
  • A Client Error response code was returned by the server [100000] total: 67:
    • https://api-easey-dev.app.cloud.gov
    • https://api-easey-dev.app.cloud.gov/
    • https://api-easey-dev.app.cloud.gov/._darcs
    • https://api-easey-dev.app.cloud.gov/.bzr
    • https://api-easey-dev.app.cloud.gov/.DS_Store
    • ..
  • Base64 Disclosure [10094] total: 1:
    • https://api-easey-dev.app.cloud.gov/emissions-mgmt/swagger-json
  • Non-Storable Content [10049] total: 1:
    • https://api-easey-dev.app.cloud.gov/emissions-mgmt/swagger-json

View the following link to download the report.
RunnerID:5560869130

[github-actions]

• Site: https://api.epa.gov
  New Alerts

  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/export?monitorPlanId=monitorPlanId&year=1.2&quarter=1.2&reportedValuesOnly=true
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/submission-progress?submissionPeriod=2019-01-01
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/export?monitorPlanId=monitorPlanId&year=1.2&quarter=1.2&reportedValuesOnly=true
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/submission-progress?submissionPeriod=2019-01-01
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/export?monitorPlanId=monitorPlanId&year=1.2&quarter=1.2&reportedValuesOnly=true
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/submission-progress?submissionPeriod=2019-01-01
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/export?monitorPlanId=monitorPlanId&year=1.2&quarter=1.2&reportedValuesOnly=true
    • https://api.epa.gov/easey/dev/emissions-mgmt/emissions/submission-progress?submissionPeriod=2019-01-01

• Site: https://api-easey-dev.app.cloud.gov
  New Alerts

  • Sec-Fetch-Dest Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/emissions-mgmt/swagger-json
  • Sec-Fetch-Mode Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/emissions-mgmt/swagger-json
  • Sec-Fetch-Site Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/emissions-mgmt/swagger-json
  • Sec-Fetch-User Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/emissions-mgmt/swagger-json

View the following link to download the report.
RunnerID:5629265708

[github-actions]

• Site: https://api.epa.gov

• Site: https://api-easey-dev.app.cloud.gov
  Resolved Alerts

  • Sec-Fetch-Dest Header is Missing [90005] total: 1:
  • Sec-Fetch-Mode Header is Missing [90005] total: 1:
  • Sec-Fetch-Site Header is Missing [90005] total: 1:
  • Sec-Fetch-User Header is Missing [90005] total: 1:

View the following link to download the report.
RunnerID:5769245477

[github-actions]

• Site: https://api.epa.gov

• Site: https://api-easey-dev.app.cloud.gov
  New Alerts

  • Sec-Fetch-Dest Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/emissions-mgmt/swagger-json
  • Sec-Fetch-Mode Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/emissions-mgmt/swagger-json
  • Sec-Fetch-Site Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/emissions-mgmt/swagger-json
  • Sec-Fetch-User Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/emissions-mgmt/swagger-json

View the following link to download the report.
RunnerID:5839851964

[github-actions]

• Site: https://api.epa.gov

• Site: https://api-easey-dev.app.cloud.gov
  Resolved Alerts

  • Sec-Fetch-Dest Header is Missing [90005] total: 1:
  • Sec-Fetch-Mode Header is Missing [90005] total: 1:
  • Sec-Fetch-Site Header is Missing [90005] total: 1:
  • Sec-Fetch-User Header is Missing [90005] total: 1:

View the following link to download the report.
RunnerID:5909927350

[github-actions]

• Site: https://api.epa.gov

• Site: https://api-easey-dev.app.cloud.gov
  New Alerts

  • Sec-Fetch-Dest Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/emissions-mgmt/swagger-json
  • Sec-Fetch-Mode Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/emissions-mgmt/swagger-json
  • Sec-Fetch-Site Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/emissions-mgmt/swagger-json
  • Sec-Fetch-User Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/emissions-mgmt/swagger-json

View the following link to download the report.
RunnerID:5983305100