Invalid Content Security Policy (CSP) Directive Identified in meta Elements

Severity: Information
Summary#

The following CSP directives cannot be used in meta elements and can only be set via headers:

  • frame-ancestors
  • sandbox
  • report-uri
Remediation#

Move these CSP directives to headers.

Invicti

Dead accurate, fast & easy-to-use Web Application Security Scanner

Get a demo