10035-6—Strict-Transport-Security Defined via META (Non-compliant with Spec)

PUBLISHEDsecurity alertLow

Passive

Metadata

Alert ID:: 10035-6
Risk:: Low
Type:: Passive
CWE:: CWE-319Cleartext Transmission of Sensitive Information

摘要

A HTTP Strict Transport Security (HSTS) META tag was found, defining HTTP Strict Transport Security (HSTS) via a META tag is explicitly not supported by the spec (RFC 6797).

解决方案

Do not attempt to set HTTP Strict Transport Security (HSTS) via a META tag.

参考

browse all alerts