90005-8—Sec-Fetch-User Header Has an Invalid Value

PUBLISHEDsecurity alertInformational

Passive

Metadata

Alert ID:: 90005-8
Risk:: Informational
Type:: Passive
CWE:: CWE-352Cross-Site Request Forgery (CSRF)

Summary

Specifies if a navigation request was initiated by a user.

Solution

Sec-Fetch-User header must have the value set to ?1.

References

browse all alerts