Deprecated Header Instruction Used to Implement Content Security Policy (CSP)

Severity: Information
Summary#

Invicti detected that a deprecated header instruction such as X-Content-Security-Policy and X-Webkit-CSP is used to implement CSP.

Impact#

This header instruction is deprecated and will not work on most browsers.

Remediation#

Use Content-Security-Policy header instruction instead of these deprecated header instructions:

  • X-Content-Security-Policy
  • X-Webkit-CSP
Classifications#
Invicti

Dead accurate, fast & easy-to-use Web Application Security Scanner

Get a demo