90005-2—Sec-Fetch-Mode Header is Missing

PUBLISHEDsecurity alertInformational

Passive

Metadata

Alert ID:: 90005-2
Risk:: Informational
Type:: Passive
CWE:: CWE-352Cross-Site Request Forgery (CSRF)

Summary

Allows to differentiate between requests for navigating between HTML pages and requests for loading resources like images, audio etc.

Solution

Ensure that Sec-Fetch-Mode header is included in request headers.

References

browse all alerts