numbap/gonli

Click to view the test reports for Main 👩‍🔬🧪

Versions

Description

Quick starter template for DTS projects making use of one of our commonly-used Next.js setups. This template uses the basic Next.js create-next-app bootstrap template.

Technologies Implemented

This project uses

• Next.js
• Tailwind CSS
• Jest for unit testing
• Cypress for end-to-end testing.

How to Implement/Get Started

Values that need to be configured:

Replace next-template name to new project name

Search "next-template", replace in package.json, run "npm i" in terminal and confirm package-lock.json is updated

Update the Licence

In order to use any licence with your repository, you will need DG approval. Your PO should send an email to the DG resposible for the product to request a licence ("MIT" or other).

Until you have approval from your DG your LICENCE file should only state the following (updating the year)

All Rights Reserved

Copyright (c) Her Majesty the Queen in Right of Canada, as represented by the Employment and Social Development Canada, 2021

Once approved by the DG, the copyright statement must still be included in the LICENCE.

Configuring Helm

In the helm template, the application name is next-template. this will need to be changed by the current application name.

For every Kubernetes cluster, a context.sh file needs to be defined. For example, one might be called context-dev.sh and the other context-prod.sh.

For more information, please visit the DTS SRE deployment templates.

PR Procedures/Definition of done

Have at least one person reviewing each PR before it can be merged. Each branch should be prefixed with the ID of the relevant ADO task. Eg. "379-update-readme"

Getting Started

First, run the development server:

npm run dev
# or
yarn dev

Open http://localhost:3000 with your browser to see the result.

You can start editing the page by modifying pages/index.js. The page auto-updates as you edit the file.

API routes can be accessed on http://localhost:3000/api/hello. This endpoint can be edited in pages/api/hello.js.

The pages/api directory is mapped to /api/*. Files in this directory are treated as API routes instead of React pages.

Learn More

To learn more about Next.js, take a look at the following resources:

• Next.js Documentation - learn about Next.js features and API.
• Learn Next.js - an interactive Next.js tutorial.

You can check out the Next.js GitHub repository - your feedback and contributions are welcome!

Licence

Unless otherwise noted, the source code of this project is covered under Crown Copyright, Government of Canada, and is distributed under the MIT Licence.

The Canada wordmark and related graphics associated with this distribution are protected under trademark law and copyright law. No permission is granted to use them outside the parameters of the Government of Canada's corporate identity program.

gonli's Issues

ZAP Full Scan Report

• Site: //localhost

• Site: http://localhost:3000
  New Alerts

  • Cloud Metadata Potentially Exposed [90034] total: 1:
    • http://localhost:3000/latest/meta-data/
  • Application Error Disclosure [90022] total: 1:
    • http://localhost:3000/_next/static/chunks/main-36202159dcb1560b.js
  • Content Security Policy (CSP) Header Not Set [10038] total: 11:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/AW.UN
    • http://localhost:3000/BTCQ
    • http://localhost:3000/ETHQ
    • ..
  • HTTP Only Site [10106] total: 1:
    • http://localhost:3000
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 11:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/AW.UN
    • http://localhost:3000/BTCQ
    • http://localhost:3000/ETHQ
    • ..
  • Timestamp Disclosure - Unix [10096] total: 3:
    • http://localhost:3000/_next/static/chunks/296-0dc2a9a3a9094d05.js
    • http://localhost:3000/fr/home
    • http://localhost:3000/home
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-5f4595e5518b5600.js
    • http://localhost:3000/_next/static/chunks/main-36202159dcb1560b.js
    • http://localhost:3000/_next/static/chunks/pages/index-2095cbbc5aad3ea1.js
    • ..
  • Modern Web Application [10109] total: 11:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-5f4595e5518b5600.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • http://localhost:3000/BTCQ
    • ..

View the following link to download the report.
RunnerID:3299767949

ZAP Full Scan Report

• Site: //localhost

• Site: http://localhost:3000
  New Alerts

  • Cloud Metadata Potentially Exposed [90034] total: 1:
    • http://localhost:3000/latest/meta-data/
  • Application Error Disclosure [90022] total: 1:
    • http://localhost:3000/_next/static/chunks/main-36202159dcb1560b.js
  • CSP: Wildcard Directive [10055] total: 5:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/home
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • CSP: style-src unsafe-inline [10055] total: 5:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/home
    • http://localhost:3000/robots.txt
    • http://localhost:3000/sitemap.xml
  • HTTP Only Site [10106] total: 1:
    • http://localhost:3000
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 7:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/fr
    • http://localhost:3000/fr/home
    • http://localhost:3000/home
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-5f4595e5518b5600.js
    • http://localhost:3000/_next/static/chunks/main-36202159dcb1560b.js
    • http://localhost:3000/_next/static/chunks/pages/index-2095cbbc5aad3ea1.js
    • ..
  • Modern Web Application [10109] total: 9:
    • http://localhost:3000
    • http://localhost:3000/
    • http://localhost:3000/_next/static/chunks/framework-5f4595e5518b5600.js
    • http://localhost:3000/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js
    • http://localhost:3000/fr
    • ..

View the following link to download the report.
RunnerID:3283346858