Multiple Content Security Policy (CSP) Implementation Detected
Severity: Information
Summary #
Netsparker detected that multiple CSP declaration types were implemented in the page for backward compatibility.
Impact #
Using multiple CSP implementations together might cause CSP directives to not work as intended.
Remediation #
Remove these deprecated implementations:
- X-Content-Security-Policy
- X-Webkit-CSP
Classifications #
CWE-16, ISO27001-A.14.2.5, WASC-15, OWASP PC-C9
Further Reading #
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
Tags
