Content Security Policy (CSP) Nonce Without Matching Script Block
Severity: Information
Summary #
Invicti detected that the page does not contain any script blocks with the nonce declared in CSP.
Remediation #
Ensure that all the script blocks has a matching nonce. If this nonce is not necessary then remove it from CSP.
Classifications #
CWE-16; ISO27001-A.14.2.5; WASC-15; OWASP 2013-A5; OWASP 2017-A6
Further Reading #
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
