90005-4—Sec-Fetch-User Header is Missing

PUBLISHEDsecurity alertInformational

Passive

Metadata

Alert ID:: 90005-4
Risk:: Informational
Type:: Passive
CWE:: CWE-352Cross-Site Request Forgery (CSRF)

Summary

Specifies if a navigation request was initiated by a user.

Solution

Ensure that Sec-Fetch-User header is included in user initiated requests.

References

browse all alerts