CWE-16
ISO27001-A.14.2.5
WASC-15
OWASP 2013-A5
OWASP 2017-A6

Invalid Content Security Policy (CSP) Directive Identified in meta Elements

Severity:
Information
Summary

The following CSP directives cannot be used in meta elements and can only be set via headers:

  • frame-ancestors
  • sandbox
  • report-uri
Impact
Remediation

Move these CSP directives to headers.

Required Skills for Successful Exploitation
Actions To Take
Vulnerability Index

You can search and find all vulnerabilities

Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.