90005-6β€”Sec-Fetch-Mode Header Has an Invalid Value

PUBLISHEDsecurity alertInformational
Passive

Metadata

Alert ID:
90005-6
Risk:
Informational
Type:
Passive

Summary

Allows to differentiate between requests for navigating between HTML pages and requests for loading resources like images, audio etc.

Solution

Sec-Fetch-Mode header must have one of the following values: cors, no-cors, navigate, same-origin, or websocket.

References