90005-4—Sec-Fetch-User Header is Missing

PUBLISHEDsecurity alertInformational

Passive

Metadata

Alert ID:: 90005-4
Risk:: Informational
Type:: Passive
CWE:: CWE-352Cross-Site Request Forgery (CSRF)

摘要

Specifies if a navigation request was initiated by a user.

解决方案

Ensure that Sec-Fetch-User header is included in user initiated requests.

参考

browse all alerts