default-src Used in Content Security Policy (CSP)
Summary#
Invicti detected that you used default-src in CSP directive. It is important to know that default-src cannot be used as a fallback for the functions below:
base-uri
form-action
frame-ancestors
plugin-types
report-uri
sandbox
Classifications#
Further Reading#
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
Tags
Related Vulnerabilities