90005-3—Sec-Fetch-Dest Header is Missing

PUBLISHEDsecurity alertInformational

Passive

Metadata

Alert ID:: 90005-3
Risk:: Informational
Type:: Passive
CWE:: CWE-352Cross-Site Request Forgery (CSRF)

摘要

Specifies how and where the data would be used. For instance, if the value is audio, then the requested resource must be audio data and not any other type of resource.

解决方案

Ensure that Sec-Fetch-Dest header is included in request headers.

参考

browse all alerts