90005-8—Sec-Fetch-User Header Has an Invalid Value

PUBLISHEDsecurity alertInformational

Passive

Metadata

Alert ID:: 90005-8
Risk:: Informational
Type:: Passive
CWE:: CWE-352Cross-Site Request Forgery (CSRF)

摘要

Specifies if a navigation request was initiated by a user.

解决方案

Sec-Fetch-User header must have the value set to ?1.

参考

browse all alerts