Get a demo
AppSec with Zero Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

data: Used in a Content Security Policy (CSP) Directive

Severity: Information
Summary#

Invicti detected data: use in a CSP directive.

Impact#

An attacker can bypass CSP and exploit a Cross-site Scripting vulnerability successfully by using data: protocol.

Remediation#

Remove data: sources from your CSP directives.

Classifications#
Further Reading#
Invicti Security Insights

Select Category

OR

Search Vulnerability

Tags

CSP

Related Vulnerabilities

Related Articles

Build your resistance to threats. And save hundreds of hours each month.

Get a demo See how it works