90003—Sub Resource Integrity Attribute Missing

PUBLISHEDsecurity alertMedium

Passive

Metadata

Alert ID:: 90003
Risk:: Medium
Type:: Passive
CWE:: CWE-345Insufficient Verification of Data Authenticity

摘要

The integrity attribute is missing on a script or link tag served by an external server. The integrity tag prevents an attacker who have gained access to this server from injecting a malicious content.

解决方案

Provide a valid integrity attribute to the tag.

其他信息

The following hash was calculated (using base64 encoding of the output of the hash algorithm: SHA-384) for the script in question sha384-PJww2fZl501RXIQpYNSkUcg6ASX9Pec5LXs3IxrxDHLqWK7fzfiaV2W/kCr5Ps8G

参考

browse all alerts