Are there any issues that can be ignored from ZAP scanner results? I know there is a thread here on issues that can be ignored in BURP suite here. However, those issues are informational, but those same issues are low risk (not informational) in ZAP.
This is the thread I'm talking about: Informational Issues in BURP Scan Report
In particular, I want to know if the below errors can be ignored as part of security review.
X-Frame-Options Header Not Set Web Browser XSS Protection Not Enabled Incomplete or No Cache-control and Pragma HTTP Header Set Cookie set without HttpOnly flag Password Field with Autocomplete enabled X-Content-Type-Options Header Missing