CWE-16
ISO27001-A.14.2.5
WASC-15

Deprecated Header Instruction Used to Implement Content Security Policy (CSP)

Severity:
Information
Summary

Invicti detected that a deprecated header instruction such as X-Content-Security-Policy and X-Webkit-CSP is used to implement CSP.

Impact

This header instruction is deprecated and will not work on most browsers.

Remediation

Use Content-Security-Policy header instruction instead of these deprecated header instructions:

  • X-Content-Security-Policy
  • X-Webkit-CSP
Required Skills for Successful Exploitation
Actions To Take
Classifications
Vulnerability Index

You can search and find all vulnerabilities

Featured resources

Blog

Strengthening enterprise application security: Invicti acquires Kondukto

Blog

Modern AppSec KPIs: Moving from scan counts to real risk reduction

Blog

Friends don’t let friends shift left: Shift smarter with DAST-first AppSec

Blog

Vibe talking: Dan Murphy on the promises, pitfalls, and insecurities of vibe coding

Blog

Strengthening enterprise application security: Invicti acquires Kondukto

Blog

Modern AppSec KPIs: Moving from scan counts to real risk reduction

Blog

Friends don’t let friends shift left: Shift smarter with DAST-first AppSec

Blog

Vibe talking: Dan Murphy on the promises, pitfalls, and insecurities of vibe coding