CWE-829 on ZAP

Cross-Domain JavaScript Source File Inclusion

Mon, 01 Jan 0001 00:00:00 +0000

The page includes one or more script files from a third-party domain.

Review dynamic import usage

Mon, 01 Jan 0001 00:00:00 +0000

Detects dynamic script, worker, and service-worker loader endpoints that can be influenced by attacker-controlled client-side data.

Generated by OWASP PTK SAST Module

Review importScripts usage

Mon, 01 Jan 0001 00:00:00 +0000

Detects dynamic script, worker, and service-worker loader endpoints that can be influenced by attacker-controlled client-side data.

Generated by OWASP PTK SAST Module

Review jQuery getScript usage

Mon, 01 Jan 0001 00:00:00 +0000

Detects dynamic script, worker, and service-worker loader endpoints that can be influenced by attacker-controlled client-side data.

Generated by OWASP PTK SAST Module

Review serviceWorker.register usage

Mon, 01 Jan 0001 00:00:00 +0000

Detects dynamic script, worker, and service-worker loader endpoints that can be influenced by attacker-controlled client-side data.

Generated by OWASP PTK SAST Module

Review SharedWorker constructor usage

Mon, 01 Jan 0001 00:00:00 +0000

Detects dynamic script, worker, and service-worker loader endpoints that can be influenced by attacker-controlled client-side data.

Generated by OWASP PTK SAST Module

Review System.import usage

Mon, 01 Jan 0001 00:00:00 +0000

Detects dynamic script, worker, and service-worker loader endpoints that can be influenced by attacker-controlled client-side data.

Generated by OWASP PTK SAST Module

Review Worker constructor usage

Mon, 01 Jan 0001 00:00:00 +0000

Detects dynamic script, worker, and service-worker loader endpoints that can be influenced by attacker-controlled client-side data.

Generated by OWASP PTK SAST Module

Script Served From Malicious Domain (polyfill)

Mon, 01 Jan 0001 00:00:00 +0000

The page includes one or more script files loaded from one of the ‘polyfill’ domains. These are not associated with the polyfill.js library and are known to serve malicious content.

Script Served From Malicious Domain (polyfill)

Mon, 01 Jan 0001 00:00:00 +0000

The page includes one or more script which appear to include a reference to one of the ‘polyfill’ domains. These are not associated with the polyfill.js library and are known to serve malicious content. You should check to see if it is a safe reference (for example in a comment) or whether the script is loading content from that domain.

Tainted worker or script loader URL

Mon, 01 Jan 0001 00:00:00 +0000

Detects dynamic script, worker, and service-worker loader endpoints that can be influenced by attacker-controlled client-side data.

Generated by OWASP PTK SAST Module