Summary #

Netsparker detected that the page does not contain any script blocks with the nonce declared in CSP.

Remediation #

Ensure that all the script blocks has a matching nonce. If this nonce is not necessary then remove it from CSP.

Classifications #
CWE-16, ISO27001-A.14.2.5, WASC-15, OWASP 2013-A5, OWASP 2017-A6

Dead accurate, fast & easy-to-use Web Application Security Scanner

Get a demo