[2026-07-16 12:21:15] ZAP 掃描開始
目標：https://www.steps.com.tw
模式：baseline（最長 15 分鐘）
工具：docker

Total of 3717 URLs
WARN-NEW: Vulnerable JS Library [10003] x 2 
	https://www.steps.com.tw/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 (200 OK)
	https://www.steps.com.tw/wp-content/plugins/happy-elementor-addons/assets/vendor/chart/chart.min.js?ver=3.9.0 (200 OK)
WARN-NEW: Cookie No HttpOnly Flag [10010] x 16 
	https://www.steps.com.tw/wp-login.php?reauth=1&redirect_to=https%3A%2F%2Fwww.steps.com.tw%2Fwp-admin%2F (200 OK)
	https://www.steps.com.tw/wp-login.php?reauth=1&redirect_to=https%3A%2F%2Fwww.steps.com.tw%2Fwp-admin%2F (200 OK)
	https://www.steps.com.tw/wp-login.php?action=lostpassword (200 OK)
	https://www.steps.com.tw/wp-login.php?action=lostpassword (200 OK)
	https://www.steps.com.tw/wp-login.php?redirect_to=https%3A%2F%2Fwww.steps.com.tw%2Fwp-admin%2F&wp_lang=zh_TW (200 OK)
WARN-NEW: Cookie Without Secure Flag [10011] x 8 
	https://www.steps.com.tw/wp-login.php?reauth=1&redirect_to=https%3A%2F%2Fwww.steps.com.tw%2Fwp-admin%2F (200 OK)
	https://www.steps.com.tw/wp-login.php?action=lostpassword (200 OK)
	https://www.steps.com.tw/wp-login.php (200 OK)
	https://www.steps.com.tw/wp-login.php?redirect_to=https%3A%2F%2Fwww.steps.com.tw%2Fwp-admin%2F&wp_lang=zh_TW (200 OK)
	https://www.steps.com.tw/wp-login.php?action=lostpassword&wp_lang=zh_TW (200 OK)
WARN-NEW: Cross-Domain JavaScript Source File Inclusion [10017] x 1 
	https://www.steps.com.tw/2024/08/%e4%b8%ad%e8%8f%af%e6%b0%91%e5%9c%8b%e8%bb%9f%e9%ab%94%e5%8d%94%e6%9c%83-%e6%94%bf%e5%ba%9c%e7%b6%b2%e7%ab%99%e7%87%9f%e9%81%8b%e4%ba%a4%e6%b5%81%e5%b9%b3%e5%8f%b0/ (200 OK)
WARN-NEW: Cookie without SameSite Attribute [10054] x 14 
	https://www.steps.com.tw/wp-login.php?reauth=1&redirect_to=https%3A%2F%2Fwww.steps.com.tw%2Fwp-admin%2F (200 OK)
	https://www.steps.com.tw/wp-login.php?reauth=1&redirect_to=https%3A%2F%2Fwww.steps.com.tw%2Fwp-admin%2F (200 OK)
	https://www.steps.com.tw/wp-login.php?action=lostpassword (200 OK)
	https://www.steps.com.tw/wp-login.php?action=lostpassword (200 OK)
	https://www.steps.com.tw/wp-login.php (200 OK)
WARN-NEW: CSP: Wildcard Directive [10055] x 16 
	https://www.steps.com.tw/ (200 OK)
	https://www.steps.com.tw/ (200 OK)
	https://www.steps.com.tw/ (200 OK)
	https://www.steps.com.tw/ (200 OK)
	https://www.steps.com.tw/sitemap.xml (302 Found)
WARN-NEW: Timestamp Disclosure - Unix [10096] x 8 
	https://www.steps.com.tw/ (200 OK)
	https://www.steps.com.tw/ (200 OK)
	https://www.steps.com.tw (200 OK)
	https://www.steps.com.tw (200 OK)
	https://www.steps.com.tw/%e7%b6%b2%e7%ab%99%e5%bb%ba%e7%bd%ae/ (200 OK)
WARN-NEW: Dangerous JS Functions [10110] x 1 
	https://www.steps.com.tw/wp-content/plugins/happy-elementor-addons/assets/vendor/lord-icon/lord-icon-2.1.0.js?ver=3.9.0 (200 OK)
WARN-NEW: Absence of Anti-CSRF Tokens [10202] x 10 
	https://www.steps.com.tw/wp-login.php?reauth=1&redirect_to=https%3A%2F%2Fwww.steps.com.tw%2Fwp-admin%2F (200 OK)
	https://www.steps.com.tw/%e7%b4%a2%e5%8f%96%e6%9b%b4%e5%a4%9a%e8%b3%87%e8%a8%8a/ (200 OK)
	https://www.steps.com.tw/wp-login.php?action=lostpassword (200 OK)
	https://www.steps.com.tw/wp-login.php?redirect_to=https%3A%2F%2Fwww.steps.com.tw%2Fwp-admin%2F&wp_lang=zh_TW (200 OK)
	https://www.steps.com.tw/wp-login.php (200 OK)
WARN-NEW: Sub Resource Integrity Attribute Missing [90003] x 11 
	https://www.steps.com.tw/ (200 OK)
	https://www.steps.com.tw (200 OK)
	https://www.steps.com.tw/%e7%b6%b2%e7%ab%99%e5%bb%ba%e7%bd%ae/ (200 OK)
	https://www.steps.com.tw/%e6%a0%a1%e5%9c%92%e5%85%a5%e5%8f%a3%e7%b6%b2%e8%88%87single-sign-on/ (200 OK)
	https://www.steps.com.tw/%e8%a7%a3%e6%b1%ba%e6%96%b9%e6%a1%88/ (200 OK)
WARN-NEW: Cross-Origin-Resource-Policy Header Missing or Invalid [90004] x 13 
	https://www.steps.com.tw/ (200 OK)
	https://www.steps.com.tw/ (200 OK)
	https://www.steps.com.tw/ (200 OK)
	https://www.steps.com.tw/robots.txt (200 OK)
	https://www.steps.com.tw/wp-sitemap.xml (200 OK)
FAIL-NEW: 0	FAIL-INPROG: 0	WARN-NEW: 11	WARN-INPROG: 0	INFO: 0	IGNORE: 0	PASS: 55

[結束] exit=0