Multiple Content Security Policy (CSP) Implementation Detected
Severity: Information
Summary #
Netsparker detected that multiple CSP declaration types were implemented in the page for backward compatibility.
Impact #
Using multiple CSP implementations together might cause CSP directives to not work as intended.
Remediation #
Remove these deprecated implementations:
- X-Content-Security-Policy
- X-Webkit-CSP
Classifications #
CWE-16; ISO27001-A.14.2.5; WASC-15; OWASP PC-C9
Further Reading #
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
Tags
