Complimentary 90-day, on-prem license available for entities involved in Covid19 response.
default-src Used in Content Security Policy (CSP)
Severity: Information
Summary
Netsparker detected that you used default-src in CSP directive. It is important to know that default-src cannot be used as a fallback for the functions below:
base-uri
form-action
frame-ancestors
plugin-types
report-uri
sandbox
Classifications
ISO27001-A.14.2.5, OWASP PC-C9
Further Reading
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
Tags
