90005-1—Sec-Fetch-Site Header is Missing

PUBLISHEDsecurity alertInformational

Passive

Metadata

Alert ID:: 90005-1
Risk:: Informational
Type:: Passive
CWE:: CWE-352Cross-Site Request Forgery (CSRF)

Summary

Specifies the relationship between request initiator’s origin and target’s origin.

Solution

Ensure that Sec-Fetch-Site header is included in request headers.

References

browse all alerts