Multiple Content Security Policy (CSP) Implementation Detected
Summary#
Invicti detected that multiple CSP declaration types were implemented in the page for backward compatibility.
Impact#
Using multiple CSP implementations together might cause CSP directives to not work as intended.
Remediation#
Remove these deprecated implementations:
- X-Content-Security-Policy
- X-Webkit-CSP
Classifications#
Further Reading#
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
Tags
Related Vulnerabilities
