10035-8—Strict-Transport-Security Malformed Content (Non-compliant with Spec)

PUBLISHEDsecurity alertLow

Passive

Metadata

Alert ID:: 10035-8
Risk:: Low
Type:: Passive
CWE:: CWE-319Cleartext Transmission of Sensitive Information

摘要

A HTTP Strict Transport Security (HSTS) header was found, but it contains some content that was not expected (perhaps curly quotes), the expectation is that the content be printable ASCII characters.

解决方案

Review the configuration of this control. Ensure that your web server, application server, load balancer, etc. is configured to set Strict-Transport-Security with appropriate content.

参考

browse all alerts