Content Security Policy (CSP) Nonce Value Not Used Within Single Quotes
Severity:
Information
Summary
Invicti detected that the nonce value declared in CSP is not within single quotes.
Impact
When nonce value is not used within single quotes, it will be considered as a part of the resource URL. This will cause relevant script block to not run.
Remediation
Use nonce values within single quotes, i.e.
Content-Security-Policy: script-src 'nonce-EDNnf03nceIOfn39fn3e9h3sdfa';
Required Skills for Successful Exploitation
Actions To Take
Classifications
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Featured resources
Build your resistance to threats. And save hundreds of hours each month.
