Get a demo
AppSec with Zero Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

Scheme URI Detected in Content Security Policy (CSP) Directive

Severity: Information
Summary#

Invicti detected that scheme URI was used in CSP directive.

Impact#

This means that scheme URI in script-src (http: or https:) allows the execution of unsafe scripts.

Remediation#

Replace the scheme URI with the domain that you trust.

Classifications#
Further Reading#
Invicti Security Insights

Select Category

OR

Search Vulnerability

Tags

CSP

Related Vulnerabilities

Invicti

Dead accurate, fast & easy-to-use Web Application Security Scanner

Get a demo