10035-6β€”Strict-Transport-Security Defined via META (Non-compliant with Spec)

PUBLISHEDsecurity alertLow
Passive

Metadata

Alert ID:
10035-6
Risk:
Low
Type:
Passive

Summary

A HTTP Strict Transport Security (HSTS) META tag was found, defining HTTP Strict Transport Security (HSTS) via a META tag is explicitly not supported by the spec (RFC 6797).

Solution

Do not attempt to set HTTP Strict Transport Security (HSTS) via a META tag.

References