90005-1—Sec-Fetch-Site Header is Missing

PUBLISHEDsecurity alertInformational

Passive

Metadata

Alert ID:: 90005-1
Risk:: Informational
Type:: Passive
CWE:: CWE-352Cross-Site Request Forgery (CSRF)

摘要

Specifies the relationship between request initiator’s origin and target’s origin.

解决方案

Ensure that Sec-Fetch-Site header is included in request headers.

参考

browse all alerts

相关工具:检查可疑链接 →运行更深入的网站漏洞扫描 →校验文件哈希 →