Invalid Content Security Policy (CSP) Directive Identified in meta Elements
Summary#
The following CSP directives cannot be used in meta elements and can only be set via headers:
- frame-ancestors
- sandbox
- report-uri
Remediation#
Move these CSP directives to headers.
Classifications#
Further Reading#
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
Tags
Related Vulnerabilities
